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NKANDLA LOCAL MUNICIPAL ANNUAL REPORT: 

2014/2015 


1. LEGAL MANDATE FOR THE PREPARATION OF THE MUNICIPAL ANNUAL REPORTS: 


Section 121 of the Local Government: Municipal Finance Management Act 56 of 2003 (MFMA) stipulates that: 

1. Every municipality and every municipal entity must for each financial year prepare an annual report in 
accordance with this chapter. The council of the municipality must within nine months after the end of a 
financial year compile an annual report of the municipality and of any municipal entity under the 
municipality's sole or shared control in accordance with section 129. 

2. The purpose of an annual report is- 

a. To provide a record of activities of the municipality or municipal entity during the financial year to which the 
report relates 

b. To provide a report on the performance against the budget of the municipality or municipal entity for that 
financial year 

c. To promote accountability to the local community for the decisions made throughout the year by the 
municipality or municipal entity 

3. The annual report of a municipality must include- 

a. The annual financial statements of the municipality, and in addition, if section 122 (2) applies, consolidated 
financial statements, as submitted to the Auditor General for audit in terms of section 126 (1) 

b. The Auditor General's report in terms of section 126 (3) on those financial statements 

c. The annual performance report of the municipality prepared by the municipality in terms of section 46 of the 
Municipal Systems Act 

d. The Auditor General's audit report in terms of section 45 (b) of the Municipal Systems Act 

e. An assessment by the municipality's accounting officer of any arrears on municipal taxes and service charges 

f. An assessment by the municipality's accounting officer of the municipality's performance against measurable 
performance objectives referred to in section 17 (3) (b) for revenue collection from each revenue source and 
for each vote in the municipality's approved budget for the relevant financial year 

g. Particulars of any corrective measures taken or to be taken in response to the issues raised in the audit reports 
referred to in paragraphs (b) and (d) 

h. Any explanation that maybe necessary to clarify issues in connection with the financial statements 

i. Any information as determined by the municipality 

j. Any recommendations of the municipality's audit committee 

k. Any other information as may be prescribed. 
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CHAPTER 1: MAYOR'S FOREWORD AND EXECUTIVE SUMMARY 

1. Foreword from the Mayor 


In Local Government one of the key milestones in ascertaining accountability & transparency in municipal 
matters is the tabling of this report which is a count of progress made inaddressing service delivery back-logs as 
well as the state of fiscal and non-financial affairs of this municipality. While the role of my office has been to 
provide political guidance and ensuring that the Governance structures exist and are functional, it is also the 
mandate that is granted in the Municipal Finance Management Act that I present to all Municipal Stakeholders 
the 2013/14 Annual performance Report. Section 127 (2) of the Local Government; Municipal Finance 
Management Act, 56 of 2004 (MFMA), the Mayor of a Municipality must, within seven months after the end of 
the financial year, table in the Municipal Council the Annual Report of the Municipality and of any Municipal 
Entity under the Municipality's sole or shared control. 

It is therefore a pleasure to present this Annual performance Report of Nkandia Local Municipality for the 
period of 2014/2015 to Council, Nkandia community, the National & Provincial Treasury, the Local Government 
in our Province of KwaZulu Natal, and the Auditor General and other stakeholders. 

In alignment to the Goals our Provincial Growth and Development Strategy (PGDS) which focuses on Job 
Creation, Strategic Infra-structure, Response to Climate Change, Spatial Equity, Human Resource Development , 
Human & Community Development as well as Governance & Policy, this Municipality has set its objectives 
within its five year IDP to ensure that this Municipality plays a visible role in advancing the objectives of our 
province and that all our operations as a municipality are in unison with the strategic focus areas of the Province 
of KwaZulu-Natal and of the country as whole, notwithstanding the uniqueness of the our local challenges and 
priorities of our local communities. As a Municipality with the total population of 114416 and unemployment 
rate of 89% and 99% of those employed earn less than R1 600 a month in accordance with the Census 2011. 
This indicates that most of the community is indigent which attest to relatively minimal rates base and a huge 
strain on the Municipality's resources. 

We have however taken advantage of the Government Progress to accelerate job creation, as a result 120 
people have been able to get jobs through the Expanded Public Works and Community Works Programs, and 
this is a minimal way in which the municipality contributes to Job Creation as well as Human & Community 
Development as a Goal of the PDGS.1300 houses holds were electrified, beneficiaries who receive the free 
electricity as a basic service has increased from 800 tol235,electricity faults and outages has been dealt with 
through upgrade of electricity infrastructure. Land is our main resource, our key focus was to identify key land 
pockets and prospective catalytic projects to attract investors into the Municipality and a call for proposals for 
the development of a Shopping Centre as well as an industrial park as means to create a revenue based 
collection and improve the local economy. We hope that during the financial year much progress have been 
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made in this regard in order to quantify the impact of these catalytic projects on the overall development of the 
Municipal Area. With the supporting structures including the Audit committee , internal Auditors and a support 
from COGTA we are convinced that we have applied a value for money and redress to our community and we 
are hopeful that by the next financial year, we will be able to once again receive a clean audit which is our key 
objective. 

Despite all the blatant challenges that the Municipality faces including poor sources of revenue which results in 
perpetuated infra-structural back-logs, minimal economic activities, high poverty and illiteracy rates as well as 
high exit of skilled staff due to the size of the Municipality hence the recruitment strategy and staff retention 
policy can play a major role in mitigating the skilled staff reduction, we are confident that with minimal 
resources we are able to tackle these challenges, manage our finances appropriately and account to the 
community of Nkandia through vigorous public participation meetings and regular interaction with our Ward 
Committees which are the legal structure representing all interest groups within Nkandia. 


Councilor A.T NTULI 
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2. Foreword from the Municipal Manager 

The immense task of being in the wheel of a Local Government Institution is to successfully balance 
good governance, efficient administration and sound financial management and public accountability 
and ensuring the involvement of our communities in all the processes of the Municipality. In terms of 
the Constitution of the Republic of South Africa our developmental duties as local government are 
tostructure and manage the administration, and budgeting and planning processes and give priority to 
the basic needs of the community, and to promote the social and economic development of the 
community; as well as to participate in national and provincial development programmes. In planning 
for the five year term of Councils Office and during our annual reviews, we ensured that all our plans 
per each Key Performance Area of local government are informed by our developmental role. 

Our planning and implementation processes involve an extensive engagement with the communities 
that we serve as well as the key stakeholders such as other government institutions and sector 
departments as well as private business to ensure holistic development, as with the minimal rates base 
and our grant dependency we could not advance significantly in meeting community needs while also 
minimizing the back-logs. Therefore we ensured that our Integrated Development Plan is truly 
inclusive of all stakeholders that contribute towards the development of the municipal area, hence the 
number of projects within our area are fund by Municipal infra-structure grant and other Government 
departments. 

Nkandia Municipality has demonstrated that it practices good governance and prudent financial management in 
the year under review. The immense task at hand now therefore is to maintain the unqualified report that we 
received in the previous year and progress to a Clean Audit Opinion by putting more emphasis on implementing 
the Auditor General's recommendations and strengthening our internal controls as we were doing in the 
financial year of 2014/15.The fraud prevention strategy will be developed and risk assessment will be conducted 
by the risk committee that the council has successfully establish to mitigate all the risks that are facing the 
municipality particular at an IT section. As a Rural Municipality, challenges of high staff turn-over is inevitable, 
because scarce skills are better compensated in Municipalities with higher capacity and also in the Private 
Sector which offers more lucrative packages. As a result in year 2014/15 one Section 54/56 Manager Chief 
financial officer resigned in June 2015. 
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3. ASSESSMENT OF ANY ARREAS ON MUNICIPAL TAXES AND SERVICE CHARGES BY THE MUNICIPAL 
MANAGER 

The high levels of unemployment in the municipality's jurisdiction have impacted negatively on our ability to 
collect outstanding debt. Consequently, an increased number of indigents characterize the municipality revenue 
base. As a result long outstanding debtors have been significantly been impaired. 

Although the municipality is vast geographically, the size relative to population is very small. Therefore, this is 
reflected in the small equitable share allocation because the formula put significant weight on the population 
size. In light of the above the municipality is still exploring ways of funding indigents as the equitable share is not 
enough. 

The aging municipal electricity infrastructure is also impacting negatively on revenue collection as electricity is 
lost in transmission, illegal connections and incomplete billings attributed to the old infrastructure. 

The electricity supply in the Municipality is being supplied by the Municipality and Eskom. 

Our municipal accounts consist of mainly electricity supply, rates, refuse removal and other revenue. Water 
supply and sanitation is the function of the District Municipality. 

To illustrate our point in the slow collection rate our Municipality finds itself, see the billing sample of a month 
of June; 

Table 1: Billing and Actual Collections as at 30 June 2015 


Refuse collection billing for June 2015 


Billing 

R 780 012.00 

Collection 

R 241 853.14 

Net-effect 

R 595 449.33 

Overall 

31% 


Rates collection billing for June 

Billing 

R4 873 118.41 

Collection 

R 8 374 569.17 

Net- effect 

-R3 501450.76 

Overall 

172% 


Conventional electricity billing for the month of June 

Billing 

R8 370 859.57 

Collection 

R 6 295 863.06 

Net -effect 

R2 077 996.51 
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Overall 

75% 


Receivables/Debtors 

Electricity 

R1 024 129.34 

Property Rates 

R15 388 754.89 

Refuse Removal 

R 3 137 953.40 

Sundry Debtors 

R1 640 489.91 

Total debt 

R21 191327.54 


In a bid to alleviate the debt situation, the municipality has embarked on job creation initiatives, particularly 
EPWP and CWP. These initiatives are expected to create job opportunities and the spin off effects will result in 
the lowering of outstanding debt as income sources are created for the impoverished communities. The 
municipality has also tightened debt collection measures to improve debt recovery. The municipality has 
upgraded its infrastructure and is planning to the reintroduction of electricity disconnection for residents owing 
for any municipal services. Therefore, the Municipality expects these measures to improve debt collection going 
forward 

In conclusion I would like to extend my gratitude to the committed and dedicated officials and councillors of 
Nkandia who strive every day to ensure that today is better than yesterday and tomorrow looks much better 
than today. 
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4. Municipal Overview 
4.1 Municipal Council 

Nkandia Municipality has 14 large wards and its council is made of 27 seats. There are three political parties in 
the council; African National Congress, Inkatha Freedom Party and National Freedom Party. Councillors are 
serving in different council portfolios. The schedule of councillors of Nkandia Local Municipality is as follows: 


NAME & SURNAME 

WARD 

CREDENTIALS 

Cllr. L. Ntombela 

01 

Ward council 

Cllr. S.B. Manyathi 

02 

Ward council 

Cllr.B.B DIomo 

03 

Ward council 

Cllr. T.F Nxumalo 

04 

Ward council 

Cllr. P.R DIamini 

05 

Ward council 

Cllr. AT. Ntuli 

06 

Ward council and Mayor 

Cllr. B.WSibiya 

07 

EXCO Member 

Cllr. S.A Majola 

08 

Ward council 

Cllr. T.T DIamini 

09 

Ward council 

Cllr. S.E Mhlongo 

10 

Ward council 

Cllr. B.Z Mncadi-Mpanza 

11 

Ward council and EXCO Member 

Cllr. C.M Mthalane 

12 

Ward council 

Cllr. V.S Lushozi 

13 

Ward council 

Cllr. S.M Bhengu 

14 

Ward council 

Cllr. T.O Ndlela 

05 

Deputy Mayor 

Cllr. S.O Sibiya 

02 

Exco Member 

Cllr. B.V Khanyile 

11 

Chairperson of MPAC 

Cllr. B.N Buthelezi 

10 

PR 

Cllr. M.B.E Ntombela 

03 

PR 

Cllr. N.P.N Magubane 

10 

PR 

Cllr. N.F.J Nzuza 

06 

Speaker 

Cllr. S. Buthelezi 

11 

PR 

Cllr. J.B Ntuli 

06 

PR 

Cllr. B.B Ndima 

09 

PR 
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Cllr. N.RXulu 

11 

Ward council 

Cllr. F.K Magubane 

06 

PR 

Cllr. FI.R Ntombela 

05 

PR 


4.2 EXECUTIVE COMMITTEE 

4.2.1 Cllr. A.T Ntuli- Mayor 

4.2.2 Cllr. T.O Ndlela- Deputy Mayor 

4.2.3 Cllr. N.F.J Nzuza Speaker 

4.2.3 Cllr. B.W Sibiya- EXCO Member 

4.2.4 Cllr. S.O Sibiya- EXCO Member 

4.2.5 Cllr B.Z Mncadi- Mpanza - EXCO Member 
4.3 COUNCIL PORTFOLIOS 

4.3.1 Finance portfolio 

4.3.2 Technical portfolio 

4.3.3 Corporate services 

4.3.4 Community services 

4.3.5 Municipal Public Accounts Committee (MPAC) 




5. VISION, MISSION AND OBJECTIVES 


5.1 VISION 

To be a high performing rural Municipality driven by continuous improvement of quality of lives for 
Nkandia citizens 

5.2 MISSION 

Nkandia Municipality renders effective service delivery encompassing nature and heritage to ensure 
poverty alleviation, sustainable economic growth and development 

5.3 STRATEGIC OUTCOMES 


NATIONAL KEY PERFOMANCE 

AREA 

STRATEGIC OBJECTIVES 

A. Good governance, 

community participation, 
and ward committee 
systems 

1. Attain effective and efficient municipal administration 

2. Enhance community participation in governance 

3. Decrease municipal risks through risk management 

4. To ensure efficient and effective internal and external 

communication 

5. Advance and maintain the financial viability of the municipality 

6. To ensure effective and efficient planning, implementation and 
maintenance of municipal infrastructure 

B. Municipal Transformation 
and institutional 
development 

1. To improve service delivery and the image of the municipality 

2. Strengthen and improve employment equity in the municipality 

3. Attain effective and efficient municipal administration 

4. Organizational skills development and capacity building 

C. Local economic 

development and social 
development 

1. To improve the quality of life through social infrastructure 
development 

2. To create a conducive environment for socio -economic growth 

3. To promote a safe and healthy environment for the Nkandia 
community 

D. Infrastructure 

development and basic 
service delivery 

1. To improve quality of life through social infrastructure 
development 

2. To promote safe and healthy environment for the Nkandia 
Community 

E. Financial Viability and 
management 

1. Advance and maintain the financial viability of the municipality 

2. Improve the financial performance of the municipality 

3. Optimize budget implementation in the municipality 

4. To improve institutional efficiency through adequate systems and 
effective internal controls 

F. Cross cutting measures 

1. To promote a safe and healthy environment for Nkandia 
community 
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6. POWERS, FUNCTIONS AND DUTIES 


In terms of section 84 of the Local Government: Municipal Structures Act No. 117 of 1998, the Nkandia 
Municipality has the following powers and functions: 

■ Integrated Development Planning 

■ Solid waste disposal 

■ Regulation of passenger transport services 

■ The establishment, conduct and control of fresh produce markets and abattoirs 

■ The establishment, conduct and control of cemeteries 

■ Promotion of local tourism for the area 

■ The imposition and collection of taxes, levies and duties as related to the above functions 

■ Municipal roads 

■ Municipal public works relating to any of the above functions 



The municipalityis in western area of UThungulu District (DC28). It is situated close to the country's two largest 
ports, lying about 130 kilometres inland from Richards Bay and 250 km north of Durban. Nkandia Town is 
classified as a Rural Service Centre (RSC) and a Provincial Rural Administrative Centre (PRAC), is the only 
formalized urban area located within Nkandia situated approximately SOkilometres south-west of Melmoth and 
65kilometres from Eshowe. It is isolated from the major economic development corridors: access is via a main 
tar road from Melmoth, and tar road from Eshowe, Kranskop and Nqutu. 


The Municipality (KZ 286) consists of a vast rural area when compared to other Municipalities in the District but 
and low percentage of Economic Activity in the area. 

Table 1 below is a table briefly summarizes the demographic profile for the Municipality as per the Statistics 
South Africa (Stats SA) 2011 census. Additional information in this regard will be highlighted under the Analysis 
Phase of the document 
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Table 1: Basic Facts 


BASIC FACTS 

FIGURES 


2001 

2011 

Total Number of Population 

32 277 

34 442 

Total Number of Households 

6189 

6252 

Age Profile 



0-9 

23% 

24% 

10-19 

22% 

22% 

20-29 

19% 

17% 

30-39 

12% 

12% 

40-49 

10% 

8% 

50+ 

14% 

14% 


Source: Stats SA 2011 Census 

Table 2: Population by gender 


Age Group Male 


0-9 4262 

10-19 4062 

20-29 3160 

30-39 2274 

40-49 1375 

504- 2354 

Grand Total 17486 

Source: Stats SA 2011 Census 

Table3: Population by racial group 
Table 3 : Nkandia Population 


Female 


4059 

3682 

2880 

ion 

1574 

2682 

16956 


Grand Total 


Black African 
Coloured 


Indian or Asian 

White 

Other 


113923 

114 














114416 


Total 


Source: Stats SA 2011 Census 


Table 4: Unemployment 


Employment status 



Source: Stats SA 2011 Census 

Employment has grown by 1.9% from 2001 to 2011. The growth is not significant enough to put a dent in the 
high rate of poverty experienced by the community. The municipality has embarked on the Community Work 
Programme and the Extended Public Works Programme to try and offset the high levels of unemployment and 
poverty. To date 120 of jobs have created using the two programmes 


Table 5: Income Analysis 


No income 

2470 

R 1 - R 4800 

1292 

R 4801 - R 9600 

2430 

R 9601 - R 19 600 

5679 

R 19 601 - R 38 200 

6021 

R 38 201 - R 76 400 

2344 

R 76 401 -R 153 800 

1246 

R 153 801 - R 307 600 

601 

R 307 601 - R 614 400 

282 

R614 001- R 1228 800 

38 

R 1 228 801 - R 2 457 600 

27 

R 2 457 601 or more 

30 


Table 6: Employment Status 



Employed 

Unemployed 

Discouraged work-seeker 

Other not economically active 

Total 
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6907 

5398 

8907 

40115 

61327 

Working age population 

61327 



According to the Stats SA census, over 99% of the population earns less than R1600. This puts a strain on the 
municipal resources because almost the entire population falls within the indigent bracket. Although people 
have jobs, the lack skills prevent them from getting decent wages or salaries. 


8. Traditional Authorities 

The municipality has five traditional authorities, namely: 
Table 7: Traditional Authorities 


TRADITIONAL AUTHORITY 

INKOSI 

WARDS 

Chwezi TC 

Nkosi Sibisi 

1 

Kwa- Zondi TC 

Nkosi Zondi 

2 and 3 

Khabela TC 

Nkosi DIomo 

3 and 2 

Chunu TC 

Nkosi Mchunu 

2 and 3 

Mpungose TC 

Nkosi Mpungose 

1 and 5 

Ekukhanyeni T/A 

Nkosi Khanyile 

4 

Kwa -Xulu TC 

Nkosi Xulu 

10 

Godide TC 

Nkosi Ntuli 

12 

Mahlayizeni TC 

Inkosi Biyela 

6 

Chube TC 

Nkosi Shezi 

11 

Nxamalala 

Nkosi Zuma 

14 

Ezindlozi T/A 

Nkosi Khanyile 

11 and 14 

Mangidini T/A 

Nkosi Biyela 

7 

Magwaza T/A 

Nkosi Magwaza 

13 

Izigqoza T/A 

Nkosi Zulu 

12 

Amaphuthu T/A 

Nkosi Mbhele 

10 

Ngono T/A 

Nkosi Ntuli 

9 

Qhudeni Trust farm 

Mdluli (Umholi) 

8 


There is a fairly good working relationship between the municipality and Amakhosi. Amakhosi are involved in 
the development of their areas of jurisdiction. Going forward, the participation of Amakhosi in Council affairs 
has been formalized. Section 81 of the Local Government: Municipal Structures Act was used as a guide in 
formalizing the process. 
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9. KEY CHALLENGES 

Table 8: Key Challenges 


KEY PERFORMANCE AREA 

CHALLENGES 

Institutional Transformation 

• 

• 

• 

• 

Gazzeting of the By-laws 

Failure to implement the WSP 

Outdated IT 

Loss of skilled employees 

Infrastructure and Services 

• 

• 

• 

Aged infrastructure 

Poor infrastructure maintenance 

Poor access to infrastructure and services 

Social and Economic Development 

• 

• 

• 

High leveis of unemployment 

High levels of poverty 

Lack of skills 

Good Governance and Democracy 

• 

Vastness of most wards prevents Councilors from 
reaching all their constituency 

Financial Viability 

• 

• 

• 

Lack of revenue 

Non-payment for services 

Reliance on grants 

Spatial and Environmental Management 

• 

• 

Lack of a Land Use System 

Lack of a registered land-fill site 


10. SUCCESSES 

Although challenges have been sighted above, which are generally typical of smaller, rural municipality, there 
are successes which may be deemed minimal but a major leap in terms of municipal development, they can be 
summarized as follows: 


• The Implementation of the Community Works Programme which created a number of jobs; 

• The number of households electrified 






Number of indigent receiving free basic service 

The road rehabilitation projects to improve accessibility in previously inaccessible areas. 
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CHAPTER 2: GOVERNANCE 


1. INTRODUCTION 

In order to promote accountability to the local community for the decisions made throughout the year by the 
municipality as per Section 121 (2)(c) of the Municipal Finance management Act read in conjunction with the 
Section 18(l)(d) of the Municipal Systems Act, the Municipality has to ensure that the relevant governance 
structures exist and are functional. Both the political and administrative structures of Municipality need to be 
fully capacitated in terms of numbers and of skills. In drafting this Annual Report, the intention is not only to 
comply with relevant legislation but to promote accountability for the decisions that Council undertook in the 
financial year 2013/14. Critical to appropriate decision making are mandatory committees that each Council 
should establish to ensure that the nine characteristics of good governance are adhered to namely: 
Participation, Rule of Law, Transparency, Responsiveness, Consensus Oriented, Equity & Inclusiveness; 
Effectiveness and efficiency. Accountability as well as Sustainability. The focus of this Chapter is on Governance 
Structures, Intergovernmental Relations, Public Accountability & Participation as well as Corporate Governance. 

2. GOVERNANCE STRUCTURES 

2.1 Political Governance 

As indicated above there are twenty seven councillors that constitute NkandlaLocal Municipal Council, 

The Municipality is a plenary system with ward committees. 

There are four portfolio committees appointed by Council. These committees are aligning to the functions of 
various departments of the Municipality; 

• Budget & Treasury Portfolio Committee : Chief Financial Officer 

• Corporate Services Portfolio Committee : Director: Corporate Services 

• Technical Portfolio Committee : Director: Technical Services 

• Community Services Portfolio Committee : Director Community Services 

There are other forums and committees that are operational in the Municipality and those committees and 
forums are the following; 

• Local Labour Forum; 

• Integrated Development Plan Representative Forum; 

• Oversight Committee (MPAC) 
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ADMINISTRATIVE STRUCTURES 


2 . 


The Organisational Structure was reviewed and adopted by Council at the beginning of the financial year. A 
revised selection, recruitment and appointment policy that seeks to address the imbalances in the employment 
profile of the Municipality has been adopted by Council. There are ninety nine employees in the Municipality. 
Council approved five departments in the Municipality the departments are as follows: 

• Office of the Municipal Manager; 

• Corporate Services; 

• Technical Services; 

• Budget and Treasury Office; and 

• Community Services 

The functions of these Departments are as follows: 


Table 8: Departmental Functions 


Department 

Functions 

Office of the Municipal 
Manager 

Municipal Management 

Municipal Planning and Performance Management 

Municipal Finance Management. 

Corporate Services 

Administration: it is responsible for; billboards and display of advertisements in 
public places; municipal administration; security and cleaning services;human 
resource management; legal services; information technology communication and 
council support services. 

Budget and Treasury 
Office. 

Income: it is responsible for Revenue Management; debt management and 
internal controls. 

Expenditure: it is responsible for expenditure management; procurement; 
materials; insurance; internal controls and properties management. 

Technical Services 

Electricity; it is responsible for electricity and gas reticulation and street lighting. 

Civil services: it is responsible for air pollution; municipal public works; storm 
water management; cemeteries; funeral parlours, cleansing; fence and fences; 
burial of animals; local sports facilities; markets; municipal parks and recreation; 
planning and land use management, refuse removal; refuse dump site and solid 
waste management, municipal roads 

Community Services 

Community Services: it is responsible for building regulations, child care facilities, 
local tourism, and promotion of local economic development and facilitation of 
housing development; libraries 

Protection Services: it is responsible for firefighting services; noise pollution; 
public places; street trading; traffic and parking; disaster management; control of 
public nuisances; municipal public transport; public safety; motor licensing; 
roadworthy testing; and municipal policing. 


3. Staff Component 

The Municipality had a compliment of ninety nine staff members inclusive of five Section 57 staff members as 
well as five financial intern staff members included in this statistics, excluding 3 casual workers. During the year 
three staff members resigned. 
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Table 20: Staff component per department 


Department 

No of staff 

Office of the Municipal Manager 

11 

Budget and Treasury Office 

23 

Corporate Services 

15 

Community service 

25 

Technical Services 

27 

Total 

101 


Senior Management: 

All Senior Managers are responsible for portfolio committees in their departments. 

Table 8: Senior management 


Directorate 

Responsible 

Committee 

Municipal Manager 

S.B Mthembu 

Council and Oversight Committee 

Chief Financial Officer 

P.P Sibiya 

Budget and Treasury Committee and Budget Committee. 

Director Corporate Services 

N. PXulu 

Corporate Services Committee. 

Director Technical Services 

N.M Mnyandu 

Technical Services Committee. 

Director Community Service 

M-TG Mchunu 

Community Service Committee 


Employment Equity Development 

The Municipality had developed and approved the employment equity plan for 2013/2014 and this plan is being 
reviewed from time to time. There has been no major improvement in this regard. (See the table below) 

Table 9: Employment Equity Development 


Employment Equity Implementation 

Designation Group 

Non-Designated Group 

Women 

Total 

Top Management 

5 

0 

1 

5 

Middle Management (MANCO) 

13 

0 

3 

13 


One hundred percent of the total top management is made up of the designated group while non-designated 
group is zero percent. The middle management is one hundred percent designated group. Seventy five percent 
of the professional staff is made up of the designated group and twenty five percent is the women. This is a 
slight change from the previous year which is in the right direction. See the table below to illustrate figures: 
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Table 10: Ethnic groups employed by the municipality 


Occupational Male Female 

level 



A 

C 

1 

W 

A 

C 

1 

W 

TOTAL 

Senior 

4 

Nil 

Nil 

Nil 

1 

Nil 

Nil 

Nil 

5 

Middle 

13 

Nil 

Nil 

Nil 

3 

Nil 

Nil 

Nil 

13 

Other Staff 

33 

NIL 

Nil 

Nil 

44 

Nil 

Nil 

Nil 

80 

Total Staff 

50 

NIL 

Nil 

Nil 

48 

Nil 

Nil 

Nil 

98 
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4. Intergovernmental Relations 

To ensure co-operative governance and to implement wall to wall development, this municipality participated in 
the following IGR Forum meetings that sat at District Level, wherein matters that were cross-boundary were 
discussed and relevant sector departments invited to give inputs on other technical matters: 

• The Mayors Forum 

• The Municipal Manager's Forum 

• The Planning Forum 

• The Infra-structure Development Forum 

• The LED Forum 

• The Co-operate Services Forum 

• Financial Management Forum 

• Performance management advisory committee 

The Municipality also participates in other structures as the Forum of Municipalities and Members of the 
Executive Councils, the Speaker's Forum in Legislature and the Premier's Monitoring & Evaluation Committee. 
Participation in these committees ensures that planning if undertaken in line with National, Provincial & District 
Priorities and key strategic documents. 

5. Corporate Governance 

5.1 Risk Management 

In the year 2013/14 the top five risks as per the risk register are: 

1. None existence of Municipal By laws 

2. Failure to attract investors 

3. Inadequate registry and records management. 

4. Failure to collect debt 

5. Reliance on consultancy 

In trying to mitigating these risks, the following actions were undertaken: 

1. Cogta was requested to support the review of the Municipal By-laws, once completed they would be public 
engagements in the following financial and gazetting; 

2. The LED & Tourism Plan will be reviewed, 

3. Policies were reviewed in order to suit changing environments. 

4. Action plan on records management and establishment of records management system has been developed 

5. The municipality is currently developing revenue enhancement strategy 

6. The policy in use of consultancy will be developed in 2015/2016 
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5.2 Anti-fraud &Corruption Strategy 

This Anti-Fraud and Corruption Strategy and Fraud Prevention Plan has been developed and adopted by council. 
The plan complement the National Anti-Corruption Strategy of the country and supplements both the Public 
Service Anti-Corruption Strategy and the Local Government Anti-Corruption Strategy. 

The draft policy also give effect to the various legislative instruments relating to fraud and corruption. 

In addition, the Policy provides guidelines as to how to respond should instances of fraud and corruption be 
identified. 

A. Actions Constituting Fraud And Corruption 

Fraud and corruption manifests itself in a number of ways and varying degrees of intensity. 

These include, but are not limited to: 

• unauthorised private use of municipal assets, including vehicles; 

• falsifying travel and subsistence claims; 

• conspiring unfairly with others to obtain a tender; 

• disclosing proprietary information relating to a tender to outside parties; 

• accepting inappropriate gifts from suppliers; 

• employing family members or close friends; 

• operating a private business in working hours; 

• stealing equipment or supplies from work; 

• accepting bribes or favours to process requests; 

• accepting bribes or favours for turning a blind eye to a service provider who does not provide an 
appropriate service; 

• submitting or processing false invoices from contractors or other service providers; 

• misappropriating fees received from customers, and avoiding detection by not issuing receipts to those 
customers; 

• misappropriation of Municipal funds; 

• falsifying accounting records or documents 

• falsifying consumer debtors accounts or amending such accounts without authority; 

• Theft. 

B. Statement of attitude to fraud 

Fraud represents a significant potential risk to the Municipality's assets and reputation. 

The Municipality is committed to protecting its funds and other assets 

It is in the draft policy of the Municipality that fraud, corruption, maladministration or any other dishonest 
activities of a similar nature will not be tolerated. Such activities will be investigated, where required, and 
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actions instituted against those found responsible. Such actions may include the laying of criminal charges, civil 
and administrative actions and the institution of recoveries where applicable. 

This draft Policy includes prevention, detection, response and investigative strategies. 

5.3 Supply Chain Management 

Council adopted a Supply Chain Management Policy which covers all procurement processes and the various 
committees that have to be established to ensure transparency in supply chain. The following bid committees 
were established in 2013/14 with members as follows: 


A. Bid Adjudication Committee 

B. Bid Specification Committee 

C. Bid Evaluation Committee 

Members: 

A. ADJUDICATION: 


Mr PP Sibiya 

(Chairperson) 

Mr N.M Mnyandu 

(Vice Chairperson) 

Mrs D.K Khuzwayo 

(Member) 

Mr B.H Bhengu 

Member 


Mrs N.PXulu 


Secretary 


B. SPECIFICATION: 


Ms N.C Ngema 

Chairperson 

Mr M Shezi 

Vice Chairperson 

Ms L. Mthombeni 

Secretary 

C. EVALUATION: 


Mr J.M Nkosi 

Chairperson 

Mr N. Sikhakhane 

Vice Chairperson 

Ms L.S Buthelezi 

Member 

Mr. J.M Sibiya 

Member and secretary 


5.4 Public Satisfaction with Municipal Services 

Although no customer satisfaction survey was undertaken to determine the level of satisfaction with Municipal 
Services, there is a suggestion box that was provided at the rates to enable the community to comment on 
issues of service and service delivery. Also during the public participation meetings a record is taken on matters 
that require urgent attention. Key matters that were raised included: 

• Rehabilitation of Road Infra-structure and storm water drainage system; 
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• Electricity outages 

• New access roads; 

• Adequate Billing. 

All the raised matters then became the basis of the Performance Score-card for the following financial year 
within the respective Key Performance Areas. 

5.5 Municipal Oversight Committees 

A. The Audit Committee 


Nkandia Local Municipality has an Audit Committee as prescribed Section (166) of the Municipal Finance 
Management Act 56 of 2003. The Audit Committee serves the purpose of being an independent advisory body 
to the Council, the Political Office Bearers and the Accounting Officer thereby assisting Council in its oversight 
role. 


Membership of the Audit Committee 

There are three (3) members of the Audit Committee and one member resigned, namely:- 


• Mrs G.S. Majola 

• Ms N. Mchunu 

• DrB.VThabede 

• Mrs N.C Ndlela 


(Chairperson) 

Member 

Member 

Member 


The Committee sat 4 times during the financial year and the report is attached to this report on the 
observations of the Audit Committee. 


B. Municipal Public Accounts Committee (MPAC) 
Functions and terms of reference of the committee 


The main purpose of the MPAC is to exercise oversight over the executive functionaries of council and to ensure 
good governance in the municipality. This will include oversight over municipal entities. In order for the MPAC 
to fulfil this oversight role, it needs to be provided with the necessary information and documentation to 
interrogate the actions of the executive. 

Members of MPAC are; 


Cllr B.V Khanyile 

(Chairperson) 

IFP 

Cllr N.P.N Magubane 

Vice Chairperson 

NFP 

Cllr N.RXULU 

Member 

ANC 

Cllr B.B DIomo 

Member 

IFP 

ClIrT.F Nxumalo 

Member 

IFP 


Cllr B.B Ndima Member ANC 
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All political parties within Council are represented in the MPAC. 8 meetings were held and an overall oversight 
report is attached to this report as an annexure. 


CHAPTER 3: SERVICE DELIVERY AND ANNUAL PERFORMANCE REPORT 
Introduction and Overview 

This is an annual performance report for 2014/2015 Municipality financial year for the period starting from 01 
July 2014 to 30 June 2015 including an assessment results emanating from the targets set on the 2014/2015 
Integrated Development Plan (IDP), 2014/2015 Service Delivery Budget and Implementation plan (SDBIP). The 
municipal has been measured and evaluated based on the following six key performance areas: 

• Institutional development, capacity and transformation, 

• Financial management and viability, 

• Socio economic development, 

• Infrastructural Development, and 

• Democracy and good governance. 

• Cross cutting issues 

1. Background 

Section 41 (1) (a) of the Municipal Systems Act 32 of 2000 states that: 

a) The Municipality must set appropriate key performance indicator as a yardstick for measuring performance 
including outcomes and impact, with regard to the Municipality development priorities and objectives set out in 
its Integrated Development Plan. 

b) Takes steps to improve performance with regards to those development priorities and objectives where 
performance target are not met. 

A comparison of the performance with the targets set and performance for the last previous financial year 

c) Report to council, other Political structures. Municipality staff and public 

Section 45(1) the results of the performance must be measured and audited as part of Municipality Internal 
Auditing Processes and Annually by the Auditor general. 

2. Performance Management Processes and Compliances 

The Municipality has considered the above legislations to determine the level of compliance to the prescripts 
indicated and sighted the following 

3.1 Organizational Performance Management 


❖ The targets that were set on the Municipal IDP and SDBIP has been taken in to consideration, weighted 
and evaluated 

❖ The key performance areas that were used are in accordance with the legislation and six National KPA 
has taken in to consideration during 2014/2015 financial year review as per (organizational Performance 
Management starter pack Model September 2004) and National treasury circular no 13. 

❖ Section 42 refers to Community involvement in PMS; this has been taken place through IDP Izimbizo, 
ward committee meetings, newspaper adverts and advertisement on Municipal website. 
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❖ Steps to be taken to the targets not met are always taken in to consideration and the action plan as a 
monitoring tool has been develop and monitor on regular bases and as a standing item on MANCO 
meetings, MPAC meetings, and council meetings. 


3.2 Individual Performance Management 

❖ The Generic Performance Plans in the form of the SDBIP have been developed and the Personal 
Development Plans, which spells out areas of personal development as per the guidelines for section 
54/56 employees have been taken in to consideration, and the individual competencies as per the 
performance Regulations in the Notice no 805 published on 01 August 2006 and local Governance 
regulations on appointment and conditions of employment of Senior Managers ,Reg 21 of 17 January 
2014 were considered. 

❖ The Individual performance are conducted on quarterly bases on one to one and by panel during mid- 
year and annually as per the performance framework and as per signed Performance Agreement. 

❖ The performance committee consist of the Mayor, Member of Exco, Chairperson of Audit Committee 
and member of ward committees. 


3. PERFOMANCE REPORTING PROCESS 

The municipal performance and individual performance is monitored on Monthly and quarterly bases, 
the departmental reports are submitted on a regular bases. 

• The individual and organizational monthly operational reports are submitted to MANCO within 
1 week after the end of each calendar month 

• Quarterly Departmental and organizational performance reports are submitted for evaluation 
and verification to MANCO, Internal Auditors, and Audit Committee and submitted to council 
for approval. 

• This report includes highlights from the key performance measures included in the IDP 
2014/2015. These priority measures constitute the Municipal Scorecard for 2014/2015 

• At the end of quarter four, 76% of priority performance measures have met. Areas for 
improvement are attached on a targets not met action plan and Accountable officers have 
provided commentary to put performance into context and identified actions that they are 
taking to address performance. 

• In 2014/2015 Annual performance report has a major improvement when compared with 
2013/2014 annual performance report. It is worth noting that impact of factors such as budget 
affect the municipality to achieve all targets. 

• Performance Monitoring underpins the Municipality's IDP in terms of reviewing progress 
regularly in achieving our priorities and delivering value for money. Early investigation of 
variances enables remedial action to be taken where appropriate. 

4. KEY PERFOMANCE REVIEWS 


5.1 Good Governance and Public Participation 

The Office of the Municipal Manager has facilitated all Community participation related activities as part of 
ensuring adherence to Chapter 7 of the Constitution of the Republic of South Africa No 106 of 1996 which 
informs Chapter 4 of the Municipal Systems Act No 32 of 2000. Chapter 7 of the Constitution allude to the fact 
that the involvement of Communities and community organisations in the matter of local government. This is 
evident by the number of community meetings we had in the last financial year where communities were 
appraised on issues affecting different communities and plans of the Municipality in resolving such matters 
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In order to promote accountability to the local community for the decisions made throughout the year by the 
municipality as per Section 121 (2)(c) of the Municipal Finance management Act read in conjunction with the 
Section 18(l)(d) of the Municipal Systems Act, the department has to ensure that the relevant governance 
structures exist and are functional. 

The Municipality has been able to develop the following: 

❖ The standard operating procedures and delegations. 

❖ Operational Ward committees, public participation strategy and transparency. 


5.1.1 OPERATIONAL WARD COMMITTEES. 

The ward committees are not all fully effective in all 14 wards, ward 9 and 13 does not hold regular meetings as 
required. 

5.1.2 A community consultation and participation 

The Municipality performed well in ensuring that Public participation meeting took place. All the consultation 
sessions were conducted through the Public participation. The Public Participation Strategy served to all 
structures including Council. It pave a way in all participation programmes that were planned within a financial 
year. The functionality of ward committee structures was assessed by the Province of KZN and it proved to be at 
an expected level. Some of Ward Committee structures were total dysfunctional and this was dealt with by the 
Municipality. Ward committee structures were utilized to communicate with the general public at large on the 
Service Delivery and Budget Implementation Plan (SDBIP) 

5.1.3 Communications 

The Municipality has developed the Municipal Events Calendar for the financial year which was the monitoring 
tool for the operations of the Municipality. The office of the Municipal Manager was again expected to review 
the Communication Strategy and Policy which did not happen however other means of communication strategy 
were utilized and these were informed by the Communication Plan that was developed. All Municipal 
Communicators were trained on how to handle the media and to deal with the media in cases of crises. This was 
done successful without fail. The Mayor as the main Municipal Communicator had a lot of interviews with the 
Public broadcaster which is uKhozi FM and other radio station. Newspapers were also utilized to communicate 
Municipal programmes for the Financial Year. The Municipal newsletter was produced and distributed in all 
areas around Nkandia where all issues about the Municipality were communicated. The Municipal Newsletter 
has proved to be a useful tool. The duty of corporate identity is also the responsibility if the section and this was 
dealt with where the section ensured compliant to Municipal colors. 

5.1.4 Special Programmes 

The targets that were set for some quarters were not achieved under this i.e. establishment of Youth Forum, 
Disability forum; Women Forum, and other documents that deemed important for the operations of the 
section. The development and adoption of FIIV/AIDS Strategy was a major achievement since the strategy was 
last reviewed in 2012. The Operation Sukuma Sakhe is one of the pillars of the Municipality and this was 
performed exceptionally well. All relevant external stakeholders were part of the Local Task Team meeting and 
our Municipality was won top within the District of Uthungulu as the Mayor who is the Champion was attending 
all planned meetings to get some views and opinions in all social ills. 

5.1.5 IDP 

The Municipality performed exceptionally well as all legislative mandates were adhered to and the draft IDP was 
tabled to the Community on a prescribed time which is ninety days before the start of the new Financial Year. 
IDP forum meetings took place where we allowed all external stakeholders to voice out their views regarding 
the Draft IDP. The IDP document was informed by different stakeholder meeting that were held in different 
communities. 
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• The overall score for the KPA is 79% for 2014/2015 financial year, up by 8% from 2013/2014 
Financial year report which was 71%. 

5. 2. Institutional transformation 

The IT and HR under the institutional transformation and capacity enhancement was identified as the lacking 
sections by the Auditor General and in 2013/14 financial year. The department is still lacking the capacity to 
develop the key policies, gazzetting of by-laws, plans and procedures to guide transformation and ensure that 
HR and IT issues are resolved 


• The overall score for the KPA is 76% for 2014/2015 financial year, up by 20% from 2013/2014 
financial year report which 56%. 


5.3 Financial Management and Viability 

❖ The Municipality mid- year budget and 2015/16 final budget was timeously approved. The invitation for 
public comments was issued by Manga News paper 

❖ The credit control and debt collection is still a challenge 

❖ The section 71 reports are submitted on monthly bases to executive and treasury Outsourcing of work 
to consultants has decreased as compared to previous financial years. All consultants are required to 
compulsory transfer skills to the staff. 

❖ Failure to pay invoice within 30 days still persist 

❖ Asset register has been updated accordingly. 

• The overall score for the KPA is 96% for 2014/2015 financial year, up by 9% from 2013/2014 financial 
report which was 87%. 

5.4 LOCAL ECONOMIC DEVELOPMENT 


5.4.1 Sports development 

The community department has organized the following sports activities 

5.4.2 Nkandia May Horse Riding event 2014 

Background of the event 

Nkandia municipality has taken an initiative to start and continue with the horse riding event that will be held 
annually. This event was planned to be recognised as one of the big events in the province. It was for this 
reason that 2014/2015 event was improved and it attracted more than 1000 people. This was aimed at 
promoting the horse riding as a game and also putting Nkandia on the map through this sport. Nkandia 
municipality has planned to involve strategic partners and other stakeholders in order to host the Nkandia May 
rural horse riding event. The colour theme for 2014/2015 event was black, taken from the attachment of the 
Nkandia name as Nkandia is widely known as 'Nkandia emahlathini amnyama' 

The event was held in Mjahweni- Odangweni on the 6*^ May 2015. 

The event vision was to bring together people from different walks of life to enjoy the uniqueness of horse 
riding as a sport and boost the economy of Nkandia through the event of this nature. 

5.4.3 MAYORAL CUP TOURNAMENT 
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The Mayoral Cup was established to develop sports and to address issues pertaining Nkandia sports as a whole, 
and aims to unite players and team managers on different wards of Nkandia. The Mayoral cup tournament was 
aimed at assisting young talented players to fulfill their dreams in terms of sports as we are having people who 
identify talents. 

Objectives of the tournament 

• To significantly celebrate, reward and harness soccer talent. 

• To provide lucrative professional opportunities in the sports fraternity. 

• To facilitate a rich soccer training program to groom exceptional sportsman. 

• To promote youths leading upright and worthwhile lives. 

• To foster a culture of healthy living through fitness and exercise. 

• To create a sense of community engagement and participation. 

Nkandia Municipality has a number of sport codes that participate in, regardless of sports facilities that are in an 
acceptable condition. 

The following is the list of codes that are popular in Nkandia 


Sporting codes 

Number of Facilities available 

1. Athletics (males & females) 

There are no facilities but there are many 
athletes 

2. Boxing (males & females) 

There are facilities 

3. Dance Sport 

There are facilities 

4. Football (Males & Females) 

There are facilities 

5. Indigenous Games 

There are facilities 

6. Netball (males & females) 

There are facilities but not enough 

7. Volleyball (males & females) 

There are facilities but not enough 

8. Rugby (males & females) 

There are no facilities 

9. Karate 

There are facilities but not enough 

10. Cricket 

There are no facilities 


5.4.4 Local Business Training 

Nkandia municipality organized the training for SMME's and co-operatives and the training was on financial 
management. 50 members were divided into two groups. Each group had to attend a three day training 
program. They were also presented with hardcopy and CD material on pre-finance training, a learner guide on 
understanding and developing a business plan 

5.4.5 Cooperatives Support Programmes 

Nkandia municipality supported a number of co-operativesthrough cooperatives support programmes. 

The same programme will be also enrolled in the 2015/2016 financial year. 

5.4.6 Umkhosi Womhianga 
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Nkandia Municipality supported Umkhosi womhianga by organising all logistical arrangements to ensure that 
the Nkandia maidens (izintombi) are part of the annual reed dance that is held in KwaNongoma (ENyokeni). 
The municipality organizes transport, meals, and other required items to ensure that all qualifying maidens 
are part of this event. 

5.4.7 Umkhosi Womviliyelo 

Since there are maidens that does not qualify to attend the Reed Dance, the Nkanda local municipality 
organizes its Reed Dance which is normally held in December. 

5.4.8 Community Tourism Organisation 

In 2014/2015, Nkandia municipality facilitated the formation of the Community Tourism Forum (CTO). The 
purpose of the CTO is to coordinate tourism activities within the local municipality. It shall discuss issues at a 
local municipality level and recommend matters that need attention to the District Tourism Fora. 

5.4.9 Protection Services and Disaster Management 


The protection Services is required to promote a safe and healthy environment for the Nkandia community 
by establishing Driving Licence Testing Centre that will be issuing and renewing driving licences, registering 
authority that will be registering vehicles and issuing vehicle licences and law enforcement section that will 
be enforcing the rules of the road, the bylaws and other traffic offences. It was then prioritised that the 
department starts with the law and enforcement unit. 

This unit will be incorporated in the disaster management centre where fire and rescue unit, law 
enforcement and registering authority will be operating. The municipality managed to kick start the 
establishment of the unit by employing three full time incumbents who will ensure that at least by the end of 
2015/2016 financial year the unit is functioning. A budget has been allocated for the vehicle that will be 
used by this unit and the stationery has been procured. 


• The overall score for the KPA is 67% for 2014/2015 financial year, up by 2% from 2013/2014 
financial year report which was 65%. 

5.5 BASIC SERVICE DELIVERY 


5.5.1 Electrical Unit: 

Nkandia municipality is a licensed electricity distributor and is distributing electricity in and around Nkandia 
town. The town is experiencing frequent power interruptions due to the aged electricity infrastructure. As 
the license holder, the Municipality have a duty to monitor and do reports on power interruption incidents 
(power Management System-NER, ref MB 9621-5) 

5.5.2 Infrastructure maintenance 

All households at Sakhile are having new meters installed and registered on the system. Few of the meters 
are giving problems and are attended. 

New MV and LV lines were built and completed to minimize faulty lines at Sakhile all line now are new and 
no incidents has been reported. 
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New line that will feed the hospital is not yet been energized but the poles, electrical line and auto re-closer 
is installed waiting for the date from Eskom to energize this line. 

5.5.3 Power Enquiries 

All power enquiries are attended to when they come and they are done immediately or within 24hours. In 
the month of June we recorded 04 power interruptions (MV) on Nkandia North and south that is supplied by 
section breaker 343 and 347, these interruptions were caused by aging line from Substation. The line that is 
fed from breaker 343 will be changed in the next financial year in August, the other line is awaiting for Eskom 
date to energize. 

5.5.4 Street lights 

Street lights are working and in good condition only five that are not working and will be attended to. 

5.5.5 SELF BUILT ELECTRICAL PROJECTS 

VUMANHLAMVU: The project is at 85% in construction, no houses have been energized as yet, the project 
was then put on hold for seven months due to financial constraints and it is now resumed and will continue 
as planned 

5.5.6 Road maintenance: CBD and residential roads were maintained. 

RRUP: Service Provider was appointed on the 30*^^ of October 2014 for the provision of the Grader and other 
supplementary equipment's. A letter of intent to terminate the contract was written to the Service Provider 
who in return requested to be released from duties assigned to them due to other commitments and 
personal reasons as stated in their letter. 

5.5.7 Capital Projects: 

Registration of Capital Projects with MIG: Esakhile Access Road, KwaNtshiza Access Road, Emathengeni 
Access Road, Nkethabaweli to Manzawayo Road, Makhanyezi Access Road, Mfongosi Access Road and 
Ezimvubu Gravel Road. 

Project on Construction: 

Bangamanzi-Mfongosi Link Road Rehabilitation: The project construction commenced on 20 October 2014 
and was scheduled to finish in June 30, 2014. To date the project is not complete. The project is currently 
incomplete and there are number of factors that affected the contractual completion date. Work on site has 
been very slow and the work quality is poor. The contractor has occasionally deserted the site for long 
periods which led to deterioration of the quality of work. 

5.5.8 WASTE MANAGEMENT: 

Grass cutting. Street cleaning, waste management Campaigns, recycling programmes, waste removal and 
waste management are activities performed within waste management unit. 

Grass Cutting is done in all municipal areas when the need arises. 


Waste Removal and Management: There are 75 EPWP Workers that are employed on a contract and placed 
within waste management section. The Municipality also have Waste Removal Vehicles, which remove waste 
in and around town (within the municipal boundary areas) as well as in Nodal areas. Refuse bins are placed in 
town and each household has one refuse bin which is emptied once a week. There are also izinkambo that 
also assist in managing waste in town. 

5.5.9 TOWN PLANNING: 
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Development Planning is one of the key functions within the Municipality which focuses on the performance 
area of Spatial Planning and Land Use Management. Certain Strategic objectives were set annually to achieve 
coherent, well-coordinated development planning. 

5.5.10 Housing Sector Plan: A Service Provider was appointed to review the Housing Sector Plan. The Plan 
was reviewed and submitted to council for approval. 

5.5.11 NLand Disposal: The subdivision of a commercial site for a shopping mall is underway. Inhioso 
Planning has been appointed for the project. The consultants will prepare a full PDA and attain all 
development rights i.e EIA, Water demand estimates, electricity demand estimates and geo tech study and 
registration of the site with the Surveyor General. The PDA report was submitted and is in the process of 
being advertised pending COGTA and uThungulu comments. 

5.5.12 Building Plan Approval: Facilitated the approval of various building Plans submitted to uThungulu for 
approval. Commenting on Planning issue e.g. Floor Area Ratio (FAR), zoning and Building Lines. 

5.5.13 Illegal Buildings within Nkandia Town: Updating of illegal structure list. 

5.5.14 Nkandia FET College: Department of Higher Education and Training requested additional Land for 
access, an item was submitted to Council and it was resolved that the land be given to them. Continue 
facilitating of the development of an FET College. 

• The overall score for the KPA is 68% for 2014/2015 financial year, up by 4% from 2013/2014 
financial year report which 64%. 

5.6 CROSS CUTTING MEASURES 

The cross cutting issues refers to spatial planning and environmental management. 

5.6.1 Disaster, Fire and Emergency Services 

The disaster management plan was reviewed in 2014/2015 financial year and it will be reviewed after two 
years to ensure that it complies with the relevant prescript. There is a disaster management centre that is 
not fully functional since there is still a vacancy of the disaster management officer. The post has been 
advertised and it is hoped that the centre will be functional by the end of the 2015/2016 financial year. 

When disaster occurs in Nkandia, the current staff in the fire and rescue section, visits the affected 
households and compiles a report that is also sent to the District on monthly basis. 


5.6.2 Fire and emergency 

The contract with Rural Metro through the Uthungulu District Municipality shared service was terminated in 
July 2014.The family of municipalities discussed and resolved of terminating contract and take over the 
responsibility for inclusion in the Disaster Management of the Municipalities. The pros and cons informed 
the Nkandia municipality that, it is prudent to take over the function and be operated by the Municipality. 


31 


Operational budget has been allocated in the 2014/2015 financial year to cater for the operational costs to 
ensure that the fire and rescue services unit is operational. It has been found that, it is cost effective, 
practical and more advantageous to the Municipality to take over the function currently. Other operational 
items needed to ensure that this service is fully functional will be added as and when required. In 2015/2016 
financial year, at least six fire fighters will be employed with two section leaders. 


32 



• The overall score for the KPA is 20% for 2014/2015 financial year 

• PROGRESS ON CAPITAL PROJECTS AS AT 30 JUNE 2015 


Project Name 

Project Status 

Budget 

Possible Savings 
on project 

Construction Cost 

Expenditure to Date 
forConstr. 

Balance on 

Contractor 

Professional Fees 

Expenditure to 
Date for 

Professional fees 

Balance on Fees 

Total Expenditure 
to Date 

Budget Balance 

% 

Progres 

sto 

Date 

Comments 

Consultant 

Contractor 

MDLELANGA CSC 

This project is almost complete, however the 
contractor still have to complete snag list 
including Palisade fencing and cleaning of the 

R 3 361 150.00 

RO.OO 

R 2 938 618.87 

R3 600 93242 

•R 662 313.55 

R 422 531.13 

R 414 424.64 

R 8 10649 

R 4 015 357.06 

•R 654207.06 

98% 

The contractor is not on site 
and He needs to complete the 
fencing and snag list. 

Done in-house 

Mpandia 

Construction 

EZIMPISINI/KWAGUGU CSC 

This project is complete and practical 
completion cretilicate has been issued to the 
contractor 

R 3 361 150.00 

R 348 533.86 

R 2 642 645.74 

R2 523 093.28 

R 119 552.46 

R 369 970.40 

R 364 314.65 

R 5 655.75 

R 2 887 407.93 

R 125 208.21 

100% 

The project is complete and it 
can be now hanndover to the 
beneficiaries 

Done in-house 

Mpandia 

Construction 

ESIBHUDENI COMMUNITY SERVICE 

CENTRE 

This project has been experiencing so many 
delays and cashflow problems that resulted to 
very slow progress. The contractor is not on 

R 3 529 207.50 

R 226 254.57 

R 2 897 327.13 

R 1844 017.61 

R 1 053 309.52 

R 405 625.80 

R 359 383.69 

R 46 242.11 

R 2 203 401.30 

R 1 099 551.63 

96% 

The project is almost complete 
however the contractor still has 
to complete some fnishes 

Bi 

Infrastrustructur 

Tina Sobablll Trading 
Enterprise 

A1539 ESIKHALENI ACCESS ROAD 

This project is complete and its still under 
liable period 

R 5 909 300.51 

RO.OO 

R 5 183 596.94 

R4690 396.18 

R 493 200.76 

R 725 703.57 

R 928 050.41 

•R 202 346.84 

R 5 618 446.59 

R 290 853.92 

98% 

The contractor still has to 
rectify some portion of the roac 
damaged by haivy rainfalls as 
he Is liable. 

Molemo 

Consulting 

Engineers 

Anvtsta t/a Banco 

Plant & Civils 

NGOMANKULU/NSUZE PEDESTRIAN 

BRIDGE 

The contractor is progressing on site. Progress 
and quality Is satisfectory. 

R 9 990 811.80 

RO.OO 

R 8 763 870.00 

R 2 846 852.75 

R 5 917 017.25 

R 1 226 941.80 

R 1 290 103.70 

•R 63 161.90 

R 4 136 956.45 

R 5 853 855.35 

43% 

After appointing new contractor 
SDM in a turnkey system the 
progress is satisfery 

SDM 

Consulting 

Engineers 

SDM Consulting 
Engineers 

BANGAMANZI-MFONGOSI LINK ROAD 

REHABILITATION 

The original scope of work is not complete, The 
contractor has abandoned the site. 

R 12 496 580.64 

R0.03 

R 10 961 912.82 

R 10 562 744.60 

R 399 168.22 

R 1534 667.79 

R 1 534 667.80 

■RO.Ol 

R 12 097 412.40 

R 399 168.21 

78% 

The project is not complete 
and the contractor is not on 
site. The project funds has 
been osxousted 

S.P. Sandu 
Projects 

Pure Magic Trading 
22cc 

ESAKHILE ACCESS ROAD 

The contractors progressing on site. He is now 
busy with catchpits, roadbed preparation and 
processing. 

R 16 645 508.00 

R 742 446.41 

R 13 950 054.03 

R 6 804 777.06 

R 7 145 276.97 

R 1 953 007.56 

R 1 438 850.77 

R 514 156.79 

R 8 243 627.83 

R 7 659 433.76 

53% 

The progress and quality of 

virork has improved 

Bi Infrastructure 
Consultants (PTYj 
Ltd 

Pure Magic Trading 

KWANTSHIZA ACCESS ROAD 

The project has been registered and approved 
by MIG 

R 10 442 935.80 

RO.OO 

R 9 160 470.00 

RO.OO 

R 9 160 470.00 

R 1 282 465.80 

R 787 479.00 

R 494 986.80 

R 787 479.00 

R 9 655 456.80 

10% 

Consultant for this project has 
been appointed to do Geo- 
technical and social studies. 

isivfvane 

Consulting 

Engineers 

(PTY)Ltd 

N/A 

EMATHENGENI ACCESS ROAD 

The project has been handed over to the 
contractor and He is busy with site 
establishment. 

R 17 100 000.00 

RO.OO 

R 15 000 000.00 

R 3 815 158.75 

R 11 184 841.25 

R 2 100 000.00 

R 1 312 500.00 

R 787 500.00 

R 5 127 658.75 

R 11 972 341.25 

35% 

The contractor Is busy with 
site establishment 

Impumele 

Consulting 

Engineers 

(PTY)Ltd 

MBS Yimpie JV 

NKETHABAWELI TO MANZAWAYO ROAD 

The project has been registered and approved 
by MIG 

R 12 036 504.57 

RO.OO 

R 10 558 337.34 

RO.OO 

R 10 558 337.34 

R1478 167.23 

R 631 707.82 

R 846 459.41 

R 631 707.82 

R 11 404 796.75 

10% 

Consultatnt for this project has 
been appointed to do Geo- 
technical and social studies. 

MafehlenI 
Engineers & 
Project Managers 

N/A 

MAKHANYEZI ACCESS ROAD 

The project has been registered and approved 
by MIG 

R13 58449641 

RO.OO 

R 11 916 224.92 

RO.OO 

R 11 916 224.92 

R 1 668 271.49 

RO.OO 

R 1 668 27149 

RO.OO 

R13 584496.41 

10% 

Consultatnt for this project has 
been appointed to do Geo- 
technical and social studies. 

MafehlenI 

Engineers & 
Project Managers 

N/A 

MFONGOSI ACCESS ROAD 

This project is complete and practical 
completion cretilicate has been issued to the 
contractor 

R 2 670 000.00 

R 291 764.40 

R 2 086 171.58 

R 2 292 971.39 

•R 206 799.81 

R 292 064.02 

R 199 150.00 

R 92 914.02 

R2492 121.39 

•R 113 885.79 

100% 

The project is complete. 

Consulting 
Engineers 
(PTVV IH 

Sele & Musa treading 
and tours cc 

EZIMVUBU GRAVEL ROAD 

The contractor is progressing on site. They have 
completed laying of storm water pipes and roac 
formation and he is now busy with tipping the 
first layer G7 

R4703 252.40 

RO.OO 

R 4 125 660.00 

R 3 599 578.90 

R 526 081.10 

R 577 592.40 

R 559 733.39 

R 17 859.01 

R 4 159 312.29 

R 543 940.11 

55% 

The quality and progress Is 

satiafectory 

Bi Infrastructure 
Consultants (PTYj 
Ltd 

Mdu Shandu 
Construction and 

Services 
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5. ASSESSMENT OF THE PERFOMANCE OF EXTERNAL SERVICE PROVIDER 


The monitoring of the service provider performance is ensured through the signing of the Service Level Agreement. 

It is currently being done by user department levels. The end user department is providing monthly reports to the SCM unit as well. 

Service providers who fail to perform are reported to SCM and the necessary action is taken including the termination of the contract or cancellation of an order. 


Assessment Key 

Good (G) 

The service has been provided at acceptable standards and within the time frames 
stipulated In the SLA/Contract 

Satisfactory (S) 

The service has been provided at acceptabie standards and outside of the 
timeframes stipuiated in the SLA/Contract 


The service has been provided below acceptable standards 


Bid 

Numb 

er 

Name of external 
Service Provider 

Date Contract 

Awarded 

Service provided 
in terms of the 

SLA 

Value of project 

Comparison with previous 

year 

Current Financial Year 

Assessment of Service 
Providers Performance 

Target 

Actual 

Target 

Actual 

G 



RIS VEHICLE HIRE 

12/04/2012 

Yes 

Depends on km 
travelled 

VEHICLE HIRE 

100% 

VEHICLE HIRE 

100% 

X 




Pay Day 

01/04/2013 

Yes 

R214974.36 

PAYDAY SYSTEM 

SOFTWARE 

100% 

PAYDAY SYSTEM 

SOFTWARE 

100% 

X 




Bidvest Bank 

01/03/2013 

Yes 

Depends on km 
travelled 

VEHICLE HIRE 

100% 

VEHICLE HIRE 

100% 

X 




Bytes Solution 

01/10/2012 

Yes 

R230'480.64 

IT SUPPORT 

100% 

IT SUPPORT 

100% 

X 




Indwe Risk 

Management 

01/12/2012 

Yes 

Depends on work 
done 

ISURANCE 

100% 

ISURANCE 

100% 

X 




Red Spike cc 

01/04/2013 

Yes 

R2' 691' 333. 00 

SECURITY SERVICE 

100% 

SECURITY SERVICE 

100% 

X 




Rentokil Cleaning 

20/04/2007 

Yes 

Depends on work 

CLEANING SERVICE 

100% 

CLEANING SERVICE 

100% 

X 




33 






done 









Mdledle 

Incorporated 

03/03/2011 

no 

Depends on work 
done 

LEGAL ADVISOR 

80% 

LEGAL ADVISOR 

50% 



X 


Konika Minolta 

01/06/2011 

Yes 

Depends on 
copies done 

PRINTING SERVICE 

80% 

PRINTING SERVICE 

50% 



X 


KPMG 

02/07/2013 

Yes 

Rl'571'292.00 

Financial management 
and vat recovery 

100% 

Financial 

management and vat 

recovery 

100% 

X 




Ulungeni 

consulting 

engineer 

12/04/2012 

Yes 

Depend on work 
done 

Oversee electrical 

service 

100% 

Oversee electrical 

service 

100% 

X 




NTSIDI and 

Associates 

02/04/2012 

Yes 

15% for vat 
refunded 

Vat consultants 

100% 

Vat consultants 

100% 

X 




ABSA Cash focus 

08/04/2012 

Yes 

Depend on work 
done 

Banking service 

100% 

Banking service 

100% 

X 




BPG Mass 

Appraisal 

27/04/2012 

Yes 

Rl’ 589’ 099. 00 

valuation roll 

100% 

valuation roll 

100% 

X 




Business 

connexion 

01/05/2007 

Yes 

Depends on 
monthly visits 

Financial system 

100% 

Financial system 

100% 

X 




Nashua Zululand 

31/08/2012 

Yes 

Depends on 
copies done 

Printing of debtor 

statements 

100% 

Printing of debtor 

statements 

80% 


X 



Isaluleko Project 
Manager 

16/08/2013 

Yes 

Depends on work 
done 

PMU support 

100% 

PMU support 

100% 

X 




Nxumalo 

Billboards and 

maintenance 

08/11/2013 

Yes 

R328' 320.00 

Billboards 

100% 

Billboards 

100% 

X 
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Lisulesazi trading 
enterprise 

20/12/2013 

Yes 

R402'630.00 

News letter 

100% 

News letter 

80 % 


X 



MFS consulting 

PTY LTD 

14/03/2014 

Yes 

Rl'187'062.00 

n/a 

100% 

Internal auditors 

100% 

X 




G4S 

25/03/2014 

Yes 

Depends on work 
done 

n/a 

100% 

Cash management 

100% 

X 




CONLOG solution 

for utilities 

27/03/2014 

Yes 

Depends on work 
done 

n/a 

100% 

Prepayment revenue 
management 

100% 

X 




HAMSA consulting 
engineer 

29/04/2014 

Yes 

R9’ 000’ 000. 00 

n/a 

100% 

Electrical 

infrastructure 

100% 

X 
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6. NKANDLA MUNICIPALITY 2014/2015 ANNUAL YEAR PERFOMANCE REPORT ON SDBIP TARGERTS NOT MET REMEDIAL ACTION PLAN. 


TARGETS 

REASONS OF NOT 

ACHIEVING 

CORRECTIVE MEASURES 

TARGET DATE FOR 

COMPLETION 

PROGRESS TO DATE 

RESPONSIBLE 

DEPARTMENT 

Nkandia Disability Forum 
established by 31 December 

Insufficient funds 

To be held in the next financial year 

30JUNE 2016 


MM-EXC 

1 Local plan of action for the 
disabled by 31 December 

Insufficient funds 

To be held in next financial year 

30JUNE 2016 


MM-EXC 

1 Imbizo for Senior Citizens by 

30 June 

Insufficient funds 

Its plan for next financial year 

30JUNE 2016 


MM-EXC 

1 Local Plan of action for gender 
empowerment by 31 December 

Not yet finalized 

The local plan will be done in the next 
financial year 

30JUNE 2016 


MM-EXC 

20 Men and Women trained in 

skills development 

Insufficient funds 

They will be trained in the next 
financial year 

30JUNE 2016 


MM-EXC 

1 Youth Development Policy 
adopted by Council 

Not finalized 

It will be finalized during youth 

summit to be held in the next financial 

year 

30JUNE 2016 


MM-EXC 

1 Nkandia Youth Summit held 

Insufficient funds 

To be held in next financial year 

30JUNE 2016 


MM-EXC 

Re-establishment Nkandia 

Youth Forum by 31 December 

2014 

Insufficient funds 

To be held in next financial year 

30JUNE 2016 


MM-EXC 
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Development and review of 5 

HR policies, HR police , 

attraction and retention 

strategy, leave policy, cellphone 
policy, travelling allowance 
policy, customer care policy 

Equity Plan and customer 
care policy not yet 
developed. 

4 out of 5 HR policies developed and 
approved by council, attraction and 
retention strategy, leave policy, cell 
phone policy and travelling policy 

30JUNE 2016 


Corporate Service 

Development of Complains 
handling procedure manual by 

2'"'' quarter 

Complaints handling 
procedure manual not 
developed 

Development of Complains handling 
procedure manual target planned for 
next financial year 

30JUNE 2016 

Not yet 
implemented 

Corporate service 

Adopted of the 6 IT polices, 
internet and security policy, 
change control, disaster 
recovery plan and back up 
procedure 

Policies not finalised 

Adopted of the 6 IT polices, internet 
and security policy, change control, 
disaster recovery plan and back up 
procedure 

30JUNE 2016 

Not yet 
implemented 

Corporate service 

Upgrade of Microsoft office 

license volume 50-70 user and 

Microsoft windows 7 license 50- 

70 users 

Upgrade not done 

Its planned for the next financial year 

30JUNE 2016 


Corporate Service 

Establishment of Nkandia sports 
confederation by 30 September 

2014 

Sports confederation not 

established 

To be done in the next financial year 

30JUNE 2016 


Community 

Services 

Sports Indaba to be held by 31 

December 2014 

1 Sport Indaba not held 

To be done in the next financial year 

30JUNE 2016 

The Sports indaba to 
be held during 

Mayoral cup 
planning meeting 

Community 

services 

60 Local SMME's trained and 

supported 

Insufficient Funds 

To be done in the next financial year 

30JUNE 2016 


Community 

Services 
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Development of investment 
strategy by 31 December 2014 

Delayed by consultative 
meetings 

Development of investment strategy 
by 31 December 2014 

30JUNE 2016 

The Draft has been 

developed to be 
adopted by council 
by 31March 2015 

Community 

service 

Launch of testing station by 30 

June 2015 

Delayed by consultative 
meetings 

It's will be launch in the next financial 

year 

30JUNE 2016 


Community 

Services 

1500 beneficiaries 

1500 beneficiaries not 

achieved 

The list of beneficiaries will be 

revaluated in 2015/2016 financial year 

30JUNE 2016 


Finance 

Department 

Development of Revenue 
Enhancement Strategy by 30 
September 2014 

Lack of capacity 

COGTA has been requested to assist 
the Municipality in this regard. 

30JUNE 2016 


Finance 

Department 

100% attendance of street lights 

within 48 hours 

Not achieved due to lack of 

capacity 

There was a lack of capacity due to 
high vacancy rate under electrical 
section. The recruitment of two 

additional staff members will be made 
in the next financial year. 

30JUNE 2016 

The maintenance will 

be effective in the 

next financial year 

Technical services 

29 Transformers 

Insufficient funds 

4 transformers replaced and 
seventeen transformers were serviced 
and the other the other remaining 
eight transformers will be done in the 
next financial year. 

30JUNE 2016 

Funds has been 

secured 

Technical Services 

Appointment of 2 Service 
provider 

Insufficient funds 

Budget reviewed in the next financial 

year 

30JUNE 2016 

Funds has been 

secured 

Technical Services 

Servicing of street lights 

Not achieved due to lack of 

capacity 

Not achieved due to lack of capacity 
and two staff members will be 
recruited in the next financial year to 
achieve this target in the next financial 

year 

30JUNE 2016 

Funds has been 

secured 

Technical Services 
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736 Electrified households in 

Vumanhiamvu/ Mandaba/ 

Ntinini 

Waiting for Eskom to 
energize the project 

To be finalized in the next financial 

year. Eskom has been requested to 
energize the project 

30JUNE 2016 

Letter to eskom has 

been made 

Technical Services 

35 km roads and maintained 

There is an outstanding of 
R834,249.71 owed to the 
previous service provider 

The scope will be reduced 

30JUNE 2016 

Request for addition 
funding has been 

made to MIG 

Technical Services 

Construction and completion of 

1 .Sakhile Access Road 

The project was delayed 
due to heavy rains 

The municipality has terminated the 

contract of the contractor due to 

failure to meet deadlines and the new 

contractor has been appointed and 
the project will be completed by 

December 2015 

30JUNE 2016 

The new service 

provider has been 
appointed 

Technical Services 

120 Local labourers employed 
through EPWP 

75 local labourers were 

recruited and due to 

Insufficient Funds 120 was 

not achieved. 

The additional 45 labourers will be 

recruited in the next financial year.the 
additional funding from Public works 
has been requested. 

30JUNE 2016 

The application has 
been made to public 

works 

Technical Services 

Completion of Esibhudeni CSC 
by 31 December 2014 

The project is at 95% we 
are waiting for the 
completion certificate 

The completion of certificate will be 
finalized after expiry of retention 
period 

30JUNE 2016 


Technical Services 

Completion of Bangamanzi- 
Mfongosi Link Road 

Rehabilitation 

Insufficient funds 

The Municipality applied for additional 
funding on MIG 

30JUNE 2016 


Technical Services 

Completion of Ngomankulu/ 
Nsuza pedestrian bridge 

The project is under 

construction 

The new service provider has been 
appointed 

30JUNE 2016 

The new service 

provider has been 
appointed 

Technical Services 
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Review and implementation of 
housing sector plan by 30 June 

2015 

The HSP not adopted by 

council 

FISP is Settlements for per 

recommendation of the Technical 

portfolio 

30JUNE 2016 


Technical Services 

Reviewed SDF by 31 December 

2014 

The SDF not reviewed by 

council 

The SDF and scheme is with COGTA 

(spatial planning unit) for scrutiny 

then will be submitted to Council 

30JUNE 2016 


Technical Services 

Upgrade of existing GIS 
equipment by 30 September 

2014 

Insufficient funds 

The additional funding from COGTA 
has been requested. 

30JUNE 2016 


Technical Services 

Production of GIS Map in house 
by 30 June 2015 

Insufficient funds 

The additional funding from COGTA 
has been requested. 

30JUNE 2016 


Technical Services 

Upgrade of existing GIS 
equipment by 30 September 

2014 

Insufficient funds 

The additional funding from COGTA 
has been requested. 

30JUNE 2016 


Technical Services 


40 




7. DEPARTMENTAL PERFOMANCE 


COMPARISON OF FINANCIAL YEARS 

2013/2014 FINANCIAL YEAR PERFOMANCE REPORT 

2014/2015 FINANCIAL YEAR PERFOMANCE 

DEPARTMENTS 

TOTALTARGETS 

TOTALTARGETS 

TARGETMET 

TARGETS 

TOTALTA 

TOTALTARGETS 

TARGET 

TARGETS NOT 



MET 

% 

NOT MET 

RGETS 

MET 

MET% 

MET 

CORPORATE SERVICE 

35 

22 

65% 

12 

15 

11 

73% 

4 

COMMUNITY SERVICE 

40 

26 

65% 

14 

20 

14 

70% 

6 

BUDGET AND TREASURY DEPARTMENT 

40 

34 

85% 

6 

33 

31 

94% 

2 

TECHNICAL SERVICE DEPARTMENT 

40 

28 

70% 

12 

29 

17 

59% 

12 

OFFICE OF THE MUNICIPAL MANAGER 

N/A 

N/A 

N/A 

N/A 

40 

31 

78% 

9 
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8. OVERALL MUNICIPAL PERFOMANCE AND COMPARISON OF 2014/2015 WITH 2014/2015 FINANCIAL YEAR 


COMPARISON OF FINANCIAL YEARS 

2013/2014 FINANCIAL YEAR PERFOMANCE REPORT 

2014/2015 FINANCIAL YEAR PERFOMANCE 

NKPA 

TOTAL PLANNED 

TOTAL ACHIEVED 

PERCENTAGE 

TOTAL PLANNED 

ACHIEVED TARGETS 

PERCENTAGE 


TARGETS 


ACHIEVED 

TARGETS 


ACHIEVED 

DEMOCRACY AND GOOD GOVERNANCE 

31 

22 

71% 

42 

33 

79% 

INSTITUTIONALTRANSFOMATION 

09 

5 

56% 

17 

13 

76% 

BASIC SERVICE DELIVERY 

44 

28 

64% 

25 

17 

68% 

LOCAL ECONOMIC DEVELOPMENT 

40 

26 

65% 

18 

12 

67% 

FINANCIALMANAGEMENT AND VIABILITY 

31 

27 

87% 

28 

27 

96% 

CROSS CUTTING MEASURES 

N/A 

N/A 

N/A 

5 

1 

20% 
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9. SUMMERY OF 2013/14 TARGETS AND PERFOMANCE RESULTS 


TOTAL TARGETS : 137 

TOTAL TARGETS MET : 104 = 76% 

TOTAL TARGETS NOT MET : 33 

10. COMPARISON OF 2013/2014 FINANCIAL YEAR WITH 2014/2015 FINANCIAL YEAR (Section 46 Municipal 
systems act) 



Graph: Comparative Target Achievement Information 
12. Background to municipal scorecard 

• The Municipal Scorecard approach reflects the 6 National KPA's and local priorities and enables a 
wider assessment of how the municipality is performing. 

• The performance report is based on measures included within the Municipal Scorecard. 

• The criteria used reflect factors such as previous performance levels, comparative performance 
and budget implications. These were agreed by Council on 26 June 2014. 

11. Key Areas to Note 

Improving Performance 




Overall satisfaction with Municipality's services has improved significantly. 

The issues raised by the auditor general in the year 2013/2014 has been resolved and the 
portfolio of evidence has been created. 
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12. Lessons Learnt and Way Forward 


The targets that were set and adopted by the council need to be achieved at all cost and reasons for 
variances and action to correct need to be provided as part public accountability. The recruitment 
strategy and staff retention policy can play a major role in mitigating the high staff turnover. The 
SMART principle need to be taken in to cognizance during planning in order to improve municipal 
performance. 

1. Conclusion 

The Internal Audit Activity has verified the performance measurements in terms of its Annual Audit 
Plan on a quarterly basis and provided assurance to management. 

As part of advancing service delivery and also instilling a culture of performance within the 
municipality, we have provided corrective actions to remedy the areas where performance targets 
were not achieved. Where performance targets have not been achieved as a result of lack of 
capacity by responsible Manager, areas that they need to be capacitated on will be incorporated 
into their Performance Development Plans (PDP) in the 2015/16 financial year. Furthermore those 
performance targets that have not been achieved will be prioritised on the 2015/16 financial year, 
and the implementation will be monitored on a regular basis by the management and also 
independently by the Internal Audit. 

The management uphold performance management system which was adopted by the Municipal 
Council and will ensure that it serve as a catalyst to improving service delivery. 

The organization has achieved 76% of the total annual performance score and it shows great effort to 
improve the overall situation during this financial year as compared to 2013/2014 financial year which was 
70% 
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Management report of Nkandia Municipality 


FINAL MANAGEMENT REPORT TO THE ACCOUNTING OFFICER ON THE AUDIT OF THE 
NKANDLA MUNICIPALITY FOR THE YEAR ENDED 30 JUNE 2015 

1.1 Introduction 

1.2 

1 . Our responsibility is to: 

• express an opinion on the financial statements 

• express a conclusion in the management report on the usefulness and reliability of the 
reported performance information for selected development priority and report the material 
findings in the auditor’s report 

• report on material findings relating to compliance with specific requirements in key 
applicable legislation, as set out in the general notice issued in terms of the Public Audit Act 
of South Africa, 2004 (Act No. 25 of 2004) (PAA). 

Our engagement letter sets out our responsibilities and those of the accounting officer in detail. 

2. This management report includes audit findings arising from the audit of the financial statements, 
reporting on predetermined objectives and compliance with legislation for the year ended 30 
June 2015. These findings were communicated to management, and the report also details 
management’s response to these findings. The report furthermore includes information on the 
internal control deficiencies that we identified as the root causes of the matters reported. 
Addressing these deficiencies will help to improve the audit outcome. 

3. The management report consists of an executive summary and annexures containing the 
detailed audit findings. 

EXECUTIVE SUMMARY 


SECTION 1; Interactions with stakeholders responsible for oversight and governance and key risk areas 


4. During the audit cycle, we met with the following key stakeholders who are responsible for 
oversight and governance to communicate matters relating to the audit outcome of the 
municipality. The table below depicts the effectiveness of those planned interactions with key 
stakeholders: 
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Management report of Nkandia Municipality 


Table 1: Effectiveness of planned interactions for the 2014-15 financial year 


Key matter discussed 

Mayor 

Accounting 

officer 

Audit 

committee 

Internal 

audit 

MPAC 

Cou 

ncil 

Key controls and 
commitments 

3 

3 

1 

2 

3 

1 

Audit planning and risk 

0 

0 

0 

0 

0 

0 

Execution and risk 

0 

3 

0 

1 

0 

0 

Concluding and reporting 

1 

2 

1 

1 

1 

0 

Presentations as 
requested 

0 

0 

0 

0 

0 

0 

Other meetings related to 
audit 

0 

0 

0 

0 

0 

0 

Overall assessment 








*The number in the table denotes the number of interactions that took place with the 

stakeholder 


Not effective 


Partially effective 


Effective 


5. At these interactions, we discussed and shared fraud risk matters, key controls, dashboard 
reporting, audit engagement, planning and the audit approach. The engagements were effective 
as management were committed to improve audit outcomes. Some of the stakeholders made 
commitments to implement initiatives that can improve the audit outcome. The commitments 
given and the progress of previous commitments are included in part F of section 2, which deals 
with the assessment of assurance providers. 

6. During our audit we identify the key risk areas that need to be addressed in order to improve 
audit outcomes as well as financial and performance management, and we specifically audit 
these so that we can report on the status thereof: ■ quality of submitted financial statements and 
performance reports ■ supply chain management ■ financial health ■ information technology 
controls ■ human resource management. Our assessments of the key risk areas along with the 
movements are depicted below. 


Table 2 - Key risk areas 


Key risk area 

2015 

2014 

Movement 

Quality of submitted financial statements 



0> 
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Quality of submitted performance reports 



• 

Nil' 

Supply chain management 



• 

Financial health 



•> 

Human resource management 



•> 

technology 

•> 


• Improved 

Unchanged 


3 Regressed 


No findings 

Management 
report findings 
only 

Material findings in 
audit and 
management 
reports except IT 
findings 


Material IT 
findings reported 
in the 

management 

report 


Quality of submitted financial statements and performance reports 

7. Lack of accountability due to post of chief financial officer and accounting officer being vacant. 
There was a lack of adequate review and monitoring of the accuracy and completeness of the 
financial statements and performance reports being submitted for audit. 

Supply chain management 

8. There have been improvements in recordkeeping due to management addressing prior year 
recommendations in ensuring that documents are safeguarded and retrievable timeously when 
requested. 

Human resource management 

9. Management has not taken steps to address shortcomings in officials that occupy acting 
positions, which results in officials acting for more than 3 months in a position without obtaining 
MEC approval. 

Information technology 

10. An IT Steering Committee had not been established, the Enterprise-wide Risk Register 
did not include IT risks and IT service provider performance was not formally reviewed 
and reported on. These deficiencies were mainly due to a lack of capacity at the 
municipality as many posts were vacant and management not having the required 
knowledge of the IT governance controls that should be in place. 


SECTION 2: MATTERS RELATING TO THE AUDITOR'S REPORT 
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I. 3 PART A - MISSTATEMENTS IN THE FINANCIAL STATEMENTS 

II. We identified material misstatements in the financial statements during the audit. These 
misstatements were not prevented or detected by the municipality’s system of internal control. 
These material misstatements also constitute non-compliance with section 122 of the Municipal 
Finance Management Act, 2003 (Act No. 56 of 2003) (MFMA). 

12. The misstatements that were not corrected form the basis for the opinion on the financial 
statements. 


Table 3 - Material misstatements in the financial statements 


Material misstatement 



Impact 

Impact 

Financial 

finding 

Occurred 

Nature of 



statement item 


in prior 

misstatement 

R 

R 



year 


Current 

Prior 





year 

year 

Material misstatements not corrected 

Expenditure 

Bidders not evaluated 

No 

limitation 

124 



per functionality 



888 


Accumulated 

Correction of errors in 

Yes 

Limitation 


423 417 

Surplus and 

creditors in the prior 





Payables 

period is not supported 
by any note disclosure in 
the AFS. 

Credible evidence have 
not been submitted to 
substantiate this 
adjustment 





Expenditure 

No evidence provided to 

No 

Limitation 

199 



support expenditure 
transactions during the 
financial period 



167 


AssetAdditions 

No evidence provided to 

No 

Limitation 

254 



support asset purchase 
transactions during the 
financial period 



043 


Material misstatement corrected 

Revenue: Sale of 

Revenue relating to the 

Yes 

Disagreement 

3 879 

3 893 465 

Electricity and 

sale of electricity was 



464 


Receivables from 

misstated due to 





exchange 

incorrect consumptions 





transactions 

recorded on billing 
system 





Revenue: Rates; 

Phase - in discount 

Yes 

Disagreement 

6 252 

1 208 316 

Payment Received 

percentages of property 



293 


in advance and 

rates were not updated 





Receivables from 

for the current financial 





non exchange 

period resulting in an 





transactions 

understatement of 
revenue and receivables. 






2 Departmental accounts 
were being levied rates 
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incorrectly in the prior 
period. 





Accumulated 

Surplus and 

Payables 

Correction relating to 
reversal of accruals 
raised in the prior period 
was not supported by a 
note disclosure in terms 
of G RAP 3 

Yes 

Disagreement 


301 575 

Cash flow 
statement: 

1 . Grants 

2. Interest 
Income 

3. Property, 

Plant and 
Equipment 

4. Other Non- 
cash item 

Line items disclosed in 
the cash flow statement 
were not an accurate 
representation of the 
Municipality’s cash flow 

Yes 

Disagreement 

21 194 
976 

18 446 
877 

Payables and 

accumulated 

surplus 

Payroll suspense 
account not cleared by 
the Municipality 

Yes 

Disagreement 


220 203 

Payables and 
expenditure 

Liabilities not recognised 
by the Municipality in 
accordance with GRAP 
Framework 

No 

Disagreement 

569 

442 


General 

Expenditure; 

Grant Expenditure; 
Operating lease 
expenses 

Loss on sale of 
asset 

WIP Additions 

Restated balances in 
annual financial 
statements did not 
correspond or were not 
supported by amounts 
disclosed in the 
correction of error note. 

Yes 

Disagreement 

3 728 
629 


Expenditure and 
Revenue 

Telephone income 
transactions were 
incorrectly recognised 
under the expenditure 
account 

No 

Disagreement 

63 849 


Depreciation 
expense and 
accumulated 
depreciation 

It was noted that the 
depreciation charge for 
the financial year was 
incorrectly computed 

No 

Disagreement 

600 

690 


Depreciation 
(Change in 
estimate) 

The change in 
accounting estimate 
amount of R 75 305 in 
the statement of financial 
performance does not 
agree to the note 

No 

Disagreement 

148 

406 
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disclosure: R 223 711 





Impairment and 
Inventories 

No evidence to support 
impairment of inventories 
in terms of GRAP 12 and 
GRAP 26 

No 

Disagreement 

91 423 


Accruals 

No evidence to support 
accruals raised by the 
Municipality 

No 

Limitation 

603 

151 


Irregular 

expenditure 

The municipality incurred 
expenditure that were in 
contravention of the 

MFMA and SCM 
regulations 

Yes 

Disagreement 

124 

888 



1.4 PART B - MATTERS TO BE BROUGHT TO THE ATTENTION OF THE USERS 
EMPHASIS OF MATTER PARAGRAPH 

13. The following emphasis of matter paragraphs will be included in our auditor’s report to draw the 
users’ attention to matters presented or disclosed in the financial statements: 

Restatement of corresponding figures 

14. As disclosed in note xx to the financial statements, the corresponding figures for 

30 June 2014 have been restated as a result of an error discovered during 30 June 2015 in the 
financial statements of the Nkandia Municipality at, and for the year ended, 

30 June 2014. 

Material losses/impairments 

15. As disclosed in note xx to the financial statements, material losses/impairment to the amount of 
R XX were incurred as a result of [a write-off of irrecoverable trade debtors]. 

ADDITIONAL MATTER PARAGRAPH{S) 

16. The following additional matter paragraphs will be included in our auditor’s report to draw the 
users’ attention to matters regarding the audit, the auditor’s responsibilities, and the auditor’s 
report: 

Material inconsistencies in other information included in the annual report / other information 
/ supplementary schedules / annexures 
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Unaudited disclosure notes 

17. In terms of section 125(2)(e) of the MFMA the municipality is required to disclose particulars of 
non-compliance with the MFMA. This disclosure requirement did not form part of the audit of the 
financial statements and accordingly I do not express an opinion thereon. 


1.5 PART C - CONCLUSIONS ON REPORTED INFORMATION RELATING TO THE PERFORMANCE OF THE 

MUNICIPALITY AGAINST PREDETERMINED OBJECTIVES 


18. Included below are our conclusions on the reported performance information for selected 
development priorities presented in the annual performance report. 


REPORT ON PREDETERMINED OBJECTIVES 
Introduction 

19. We have audited the reported performance information for the following selected development 
priority presented in the annual performance report of the municipality for the year ended 30 
June 2015: 

Development priority 5: Basic Service Delivery and Infrastructure Development on pages x to x 


The accounting officer’s responsibilities 

20. The accounting officer is responsible for the preparation of the annual performance report in 
accordance with the identified performance management and reporting framework, as defined in 
paragraph 5 of the general notice issued in terms of the PAA. This framework deals with the 
planning, management, monitoring and reporting of performance against predetermined 
objectives. The accounting officer is also responsible for internal controls determined by 
management as necessary to enable the preparation of an annual performance report that is 
useful and reliable. 


Auditor-general’s responsibilities 

21. As required by sections 4 and 20 of the PAA, read with the general notice issued in terms 
thereof, our responsibility is to express reasonable assurance conclusions on the reported 
performance information for selected development priorities presented in the annual 
performance report. 

22. We conducted our audit in accordance with the International Standards on Assurance 
Engagements (ISAE) 3000: Assurance engagements other than audits or reviews of historical 
financial information. 

23. We will report on whether we have received all the information and explanations required to 
conduct the engagement or if we became aware of additional information, the omission of which 
may result in the reported performance information being materially misstated or misleading. 

24. We evaluated the reported performance information against the overall criteria of usefulness and 
reliability. 
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25. We evaluated the usefulness of the reported performance information to determine whether it 
was presented in accordance with the National Treasury’s annual reporting principles and 
whether the reported performance was consistent with the planned [objectives/ development 
priorities]. We further performed tests to determine whether indicators and targets were well- 
defined, verifiable, specific, measurable, time-bound and relevant as required by the National 
Treasury’s Framework for managing programme performance information (FMPPI). 

26. We assessed the reliability of the reported performance information to determine whether it was 
valid, accurate and complete. 

27. During the audit, we performed procedures to obtain audit evidence about the usefulness and 
reliability of the reported performance information. The procedures selected depend on the 
auditor’s judgement, including our assessment of the risks of material misstatement of the 
annual performance report. Because of the test nature and other inherent limitations of an audit, 
together with the inherent limitations of internal control, there is an unavoidable risk that we may 
not detect some misstatements, even material ones, even though we properly planned and 
performed the audit in accordance with ISAE 3000. The procedures performed include the 
following: 

• Understanding and testing the internal policies, procedures and controls relating to the 
management of, and reporting on, performance information. 

• Evaluating and testing the processes, systems and controls and reviewing the 
documentation maintained at the municipality that support the generation, collation, 
aggregation, monitoring and reporting of the performance indicators and targets. 

• Evaluating, testing and confirming the usefulness of planned and reported performance 
information in accordance with the identified performance management and reporting 
framework. 

• Conducting detailed audit testing and obtaining sufficient appropriate audit evidence to verify 
the reliability of the reported performance information in terms of its validity, accuracy and 
completeness. 

28. We believe that the evidence obtained from the work performed provides an appropriate basis 
for the reasonable assurance conclusions on the usefulness and reliability of the reported 
performance information expressed below. 

Table 4 - Summary of audit conclusion(s) 


29. The following is a summary of our conclusion(s) on the usefulness and reliability of the reported 
performance information: 


Selected development 
priority 

Usefulness 

Current Prior 

year year 

Moveme 

nt 

Reliability Moveme 

nt 

Current Prio 
year r 

year 

Basic Service Delivery 
and Infrastructure 
Development 

Unqualified 

Unqualified 

•> 

Unqualified 

Unqualified 

•> 


# Improved 


Unchanged 


^ Regressed 
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Conclusion 

Unqualified conclusion 


30. In our opinion, the reported performance information of basic service delivery and infrastructure 
development is useful and reliable, in all material respects, in accordance with the identified 
performance management and reporting framework. 


Additional matters 

31. We draw attention to the following matters. Our conclusion is not modified in respect of these 
matters: Although we did not identify any material findings on the usefulness and reliability of the 
reported performance information for the selected development priority, we draw attention to the 
following matters: 


Adjustment of material misstatements 

32. We identified material misstatements in the annual performance report submitted for auditing on 
the reported performance information of basic service delivery and infrastructure development. 
As management subsequently corrected the misstatements we did not raise any material 
findings on the usefulness and reliability of the reported performance information. 


Unaudited supplementary schedules 

33. The supplementary information set out on pages x to x does not form part of the annual 
performance report and is presented as additional information. We have not audited these 
schedules and, accordingly, we do not express a conclusion thereon. 


1.6 PART D - FINDINGS ON NON-COMPLIANCE WITH LEGISLATION 

34. Included below are material findings on non-compliance with specific requirements in key 
applicable legislation. 

Annual financial statements, performance and annual reports 

35. The financial statements submitted for auditing were not prepared in all material respects 
in accordance with the requirements of section 122 of the MFMA. 

Material misstatements of non-current assets, current assets, liabilities, revenue, 
expenditure anddisclosure items identified by the auditors in the submitted financial 
statement were subsequently corrected and the supporting recordsprovided, resulting in 
the financial statements receiving an unqualified audit opinion. 

Procurement and contract management 
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36. Awards made to close family members who did not declare their interest, as required by 
section of the MFMA. 


Human resource management 

37. Official appointed more than 3 months in acting position which is contravention of the 
Municipal System Act, No. 56(l)(a )(ii). 

Expenditure management 

38. Reasonable steps were not taken to prevent irregular expenditure, as required by section 
62(l)(d) of the MFMA. 


Table 5 - Findings on non-compliance 


Non-compliance area 

2015 

2014 

Movement 

Annual financial statements, performance and annual 
reports 



•> 

Procurement and contract management 



• 

Human resources management and compensation 



# 

Expenditure management 



•> 



•> 

• 

# Improved 

Unchanged 

Regressed 


No findings Management 

Material compliance 

report findings 

findings identified in 

only 

audit and management 


report 


1.7 

1.8 

1.9 

1.10 PARTE -INTERNAL CONTROL 

IMPLEMENTATION OF THE DRIVERS OF INTERNAL CONTROL 
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39. Below is our assessment of the implementation of the drivers of internal control, based on 
significant deficiencies identified during our audit of the financial statements, the [annual 
performance report / insert name of performance report] and compliance with legislation. 
Significant deficiencies occur when internal controls do not exist, are not appropriately designed 
to address the risk, or are not implemented, which either had or could cause the financial 
statements or the [annual performance report / insert name of performance report] to be 
materially misstated and material instances of non-compliance with legislation to occur. 

40. When the required preventative or detective controls are in place, it is assessed with a©; when 
progress on the implementation of such controls was made but improvement is still required or 

where actions taken are not sustainable, it is assessed with a©; while ^ indicates that internal 
controls are not in place and intervention is required to design and implement appropriate 
controls. The movement in the status of the drivers from the previous year-end to the current 
year-end is indicated collectively for each of the three audit dimensions (namely financial 
statements, performance reporting, and compliance with legislation) under the three 
fundamentals of internal control (namely leadership, financial and performance management, 

and governance), with 1j" (improved), (unchanged) or '0' (regressed). 


Table 6 - Key control assessment 


Financial 

statements 

Curr Prior 
ent year 
year 

Performance 

reporting 

Curr Prior 
ent year 
year 

Compliance 

with 

legislation 
Curr Prior 
ent year 
year 

Leadership 

Overall movement from previous 
assessment 




• Provide effective leadership based 
on a culture of honesty, ethical 
business practices and good 
governance, protecting and 
enhancing the best interests of the 
municipality 







• Exercise oversight responsibility 
regarding financial and 
performance reporting and 
compliance as well as related 
internal controls 

© 


© 

© 

© 

• 

• Implement effective human 
resource management to ensure 
that adequate and sufficiently 
skilled resources are in place and 
that performance is monitored 

© 

© 

© 

© 

© 

© 

• Establish and communicate 
policies and procedures to enable 
and support the understanding 
and execution of internal control 
objectives, processes and 

© 



© 

© 

© 
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Financial 

statements 

Curr Prior 
ent year 
year 

Performance 

reporting 

Curr Prior 
ent year 
year 

Compliance 

with 

legislation 
Curr Prior 
ent year 
year 


responsibilities 







• Develop and monitor the 
implementation of action plans to 
address internal control 
deficiencies 

© 

© 

© 

© 

© 

© 

• Establish an information 
technology governance framework 
that supports and enables the 
business, delivers value and 
improves performance 

• 

© 

n/a 

n/a 

n/a 

n/a 



Overall movement from previous 
assessment 





• Implement proper record keeping 
in a timely manner to ensure that 
complete, relevant and accurate 
information is accessible and 
available to support financial and 
performance reporting 

© 

• 

© 

© 

© 

© 

• Implement controls over daily and 
monthly processing and 
reconciling of transactions 



© 

© 

© 

© 

• Prepare regular, accurate and 
complete financial and 
performance reports that are 
supported and evidenced by 
reliable information 

• 

• 

© 

© 

© 

• 

• Review and monitor compliance 
with applicable legislation 

© 


© 

© 

© 

n 

• Design and implement formal 
controls over information 
technology systems to ensure the 
reliability of the systems and the 
availability, accuracy and 
protection of information 

• 

© 

n/a 

n/a 

n/a 

n/a 

Governance 


Overall movement from previous 
assessment 



c=> 
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Financial 

statements 

Curr Prior 
ent year 
year 

Performance 

reporting 

Curr Prior 
ent year 
year 

Compliance 

with 

legislation 
Curr Prior 
ent year 
year 

• Implement appropriate risk 
management activities to ensure 
that regular risk assessments, 
including the consideration of 
information technology risks and 
fraud prevention, are conducted 
and that a risk strategy to address 
the risks is developed and 
monitored 

© 

© 

© 

© 

© 

© 

• Ensure that there is an adequately 
resourced and functioning internal 
audit unit that identifies internal 
control deficiencies and 
recommends corrective action 
effectively 

© 

© 

© 

© 

© 

© 

• Ensure that the audit committee 
promotes accountability and 
service delivery through evaluating 
and monitoring responses to risks 
and overseeing the effectiveness 
of the internal control environment, 
including financial and 
performance reporting and 
compliance with legislation 

© 

© 

© 

© 

© 

© 


Table 7 - Overall status of drivers of key controls 

41 . The table below provides the overall status of the drivers of key controls. 


Status of the drivers of internal controls 

Leadership 

• 

Financial and 
performance 
management 

•> 

Governance 

• 

Effective leadership 
culture 


Proper record 
keeping 


Risk 

managemen 

t 


Oversight 

responsibility 


Processing and 
reconciling 
controls 


Internal audit 
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Status of the drivers of internal controls 

HR management 


Regular reporting 


Audit committee 


Policies and 
procedures 


Compliance 

monitoring 




Audit action plans 


IT system controls 











• Improved 

Unchanged 

$ Regressed 


IT Improved 

Unchanged 

'0' Regressed 


Good 

Concerning 

Intervention required 


Oversight responsibility 


42. As the accounting officer did not adequately review the financial statements and 

theannual performance report of Nkandia Municipality before submitting them for 

auditing, the following matters were not identified and corrected: 

The Nkandia municipality did not have sufficient monitoring controls to ensure the proper 
implementation of the overall process of accurate reporting resulting in a number of material 
misstatements being identified by the audit process which were not identified by management 
before submission of the financial statements. 


Management of vacancies 


Positions vacant at year-end 

No of 
posts 
vacant 

Vacancy 
rate (%) 

Accounting officer 

0 

0% 

Senior management positions - finance 

0 

0% 

Senior management positions - performance 

0 

0% 

Senior management positions - supply chain management 

0 

0% 

Chief financial Officer 

0 

0% 

Senior technical department positions 

0 

0% 
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Support staff positions - finance department 

1 

6.67% 

Support staff positions - performance department 

0 

0% 

Support staff positions - supply chain department 

1 

16.67% 


• The overall vacancy rate at year end increased from 7.92% in the previous year to 16.95 % 
in the current year. 

• The senior management vacancy rate at year end decreased from 20% in the previous year 
to 0% in the current year. 

• Support staff positions within the finance/performance and compliance departments were 
vacant for more than 6 months. 

• The vacancy rate of support staff positions increased since the previous period. 


Suspensions 

• Employees were on suspension with pay for more than 30 days. The longest suspension 
period is 181 days. 

• Prolonged suspension periods that did not appear to be reasonable in the circumstances. 


Leadership 

Information technology governance framework 

43.An IT Governance Framework had been documented. It was however noted that this 
framework had not been comprehensively compiled and important information was found 
to have been excluded from the document. It was further noted that the framework had not 
been approved and therefore could not be implemented at the municipality. This was 
attributed to no individual being identified and assigned the responsibility to drive IT 
governance at the municipality. It was further noted that an IT Steering Committee had not 
been established, the Enterprise-wide Risk Register did not include IT risks and IT service 
provider performance was not formally reviewed and reported on. These deficiencies were 
mainly due to a lack of capacity at the municipality as many posts were vacant and 
management not having the required knowledge of the IT governance controls that should 
be in place. 


FINANCIAL AND PERFORMANCE MANAGEMENT 
Proper record keeping 

44. Significant difficulties encountered during the audit in obtaining required information 
resulting in unnecessarily short time within which to complete the audit. The information 
was give only after we issued the draft management report. 
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Daily and monthly processing and reconciling of transactions 

45. Management did not design daily and monthly controls to lessen its business risk as recurring 
issues in recent years were noted in that creditors reconciliation not being done between the 
sub-ledger to the general ledger and to suppliers statements 

Regular, accurate and complete financial and performance reports 

46. As indicated in part A of section 2, the financial statements contained numerous misstatements 
that were corrected. This was mainly due to staff members not fully understanding the 
requirements of the financial reporting framework and GRAP Standards. 

Compliance monitoring 

47. Non-compliance with legislation could have been prevented had compliance been properly 
reviewed and monitored. 

Information technology systems 

IT systems 

48. Significant deficiencies relating to controls in the Security Management, User Access 
Management, Information Technology Service Continuity and Program Change 
Management focus areas were identified. 


Required security management controls were not designed as a patch management and 
adequate password policy had not been documented. Password setting configured on IT 
systems were not in line with best practices and user awareness training for IT Security 
was not done. In addition, usernames were not compliant with the established standard 
naming convention and security and logon violations were not reviewed. 

User access management controls were not implemented and consistently complied with 
as procedures were not approved, inappropriate access was assigned, software licenses 
were not monitored and required reviews and documentation were not completed. 

Information Technology Service Continuity controls were not adequately implemented as 
a Business Continuity Plan was not established and the Disaster Recovery Plan was not 
tested. In addition, critical equipment in the server room had not been service and 
deficiencies were also noted in the current backup processes performed. 

Program Change Management processes did not cover emergency changes and change 
logs could not be generated from systems utilised. 

Deficiencies were also noted with management of the firewall and the EFT processes 
performed. 

All deficiencies noted were attributed to a lack of capacity within the municipality and 
insufficient knowledge with regard to required IT controls that needed to be established. 
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SUMMARY 


49. The matters above, as they relate to the basis for the opinion, findings on the annual financial 
statements and annual performance report and findings on non-compliance with legislation, 
will be summarised in the auditor’s report as follows: 

Leadership 

50. The accounting officer did not exercise adequate oversight over financial reporting and 
compliance as well as internal control. In this regard, the accounting officer did not 
regularly assess whether staff members had essential skills and knowledge to support 
the achievement of credible reporting and comply with designed policies and 
procedures. 

Financial and performance management 

51 . Adequate processes were not in place to communicate timely and relevant information to 
oversight and regulatory parties, in that monthly reporting and reconciliation processes 
were not at optimum levels. In addition, record management and review processes were 
not designed and implemented in a manner to improve accountability and credibility in 
financial reporting. This is evidenced by the material corrections to the financial 
statements, as well as the lack of records during the audit process. 

52. In assisting administrative leadership with addressing the control weaknesses identified during 
the audit, the key root causes of the findings and comments on their status are detailed in the 
table below: 

Table summarising identified root causes 

Table 8 - Root causes 


Root causes 

No 

Root causes 

Yes/No 

Movement 

s 

Comments on the status of the root 

causes 

1. 

Slow response by 
political leadership 

Yes 

•> 

Slow response by political leadership in 
addressing the appointment of a 
municipal manager and CFO 

2. 

Slow response by 
oversight 



Lack of adequate commitment by 
oversight in ensuring the accuracy of the 
financial statement submitted to audit 


hmproved®^Unchanged^Regressed 


72 



1.11 PART F - ASSESSMENT OF ASSURANCE PROVIDERS 


53. The annual report is used to report on the financial position of municipalities, their performance 
against predetermined objectives and overall governance, and one of the important oversight 
functions of legislatures is to consider auditees’ annual reports. To perform their oversight 
function, they need assurance that the information in the annual report is credible. To this end, 
the annual report also includes our auditor’s report, which provides assurance on the credibility 
of the financial statements and the annual performance report as well as on the municipality’s 
compliance with legislation. 

54. Our reporting and the oversight processes reflect on past events, as it takes place after the 
end of the financial year. However, management, the leadership and those charged with 
governance contribute throughout the year to the credibility of financial and performance 
information and compliance with legislation by ensuring that adequate internal controls are 
implemented. 

55. We assess the level of assurance provided by these assurance providers based on the status 
of internal controls (as reported in part E of section 2) and the impact of the different role 
players on these controls. We provide our assessment for this audit cycle below. 


(Include further high level details on the reasons for the assessed assurance levels.) 


Assurance levels 


Senior management 
Accounting officer 
Mayor of municipality 
Internal audit 
Audit committee 
Municipal council 
MPAC 


Provides assurance 
Provides some assurance 


Provides assurance 


Provides some assurance 
Provides some assurance 
Provides some assurance 
Provides some assurance 


Senior Management 


56. Senior management are committed and attend audit steering meetings and actively participate in 
these meetings. 
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Municipal manager 


57. The acting municipal manager shows dedication and commitment in addressing shortcomings in 
internal controls and improving audit outcomes. 

Mayor of municipality 


58. The honourable mayor plays a pivotal role in the municipality in ensuring credible and reliable 
information is produced and discussed at meetings and ensuring that the audit outcomes are 
improved and service delivery takes place as priority. 


Internal audit 


59. Legislation in South Africa requires the establishment, roles and responsibilities of internal 
audit units. Internal audit units form part of the internal control and governance structures of 
the municipality as they have an important role in the monitoring activities of the municipality. 
Internal audit provides an independent assessment of governance, risk management and 
internal control processes of the municipality. 

60. The internal audit unit of a municipality must prepare a risk based audit plan and internal audit 
program for each financial year, and advise the accounting officer and report to the audit 
committee on the implementation of the internal audit plan and matters relating to internal 
audit, internal controls, accounting procedures and practices, risk and risk management, 
performance management, loss control and compliance with the MFMA. The internal audit unit 
must also perform such other duties as may be assigned by the accounting officer. 

61. Internal audit plays an active role at the municipality in ensuring oversight responsibilities are 
performed and actively participate in audit steering meetings and assessing of internal control 
measures are functioning. 


Audit Committee 


62. The audit committee is an independent advisory body to the municipal council/political office 
bearers/ accounting officer and the management and staff of the municipality on matters 
relating to internal financial control and internal audits; risk management; accounting policies; 
the adequacy, reliability and accuracy of financial reporting and information; performance 
management; effective governance; with the MFMA, DoRA and any other applicable 
legislation; performance evaluation; and any other issues. 

63. The audit committee is also expected to review the annual financial statements to provide an 
authoritative and credible view of the municipality, its efficiency and effectiveness and its 
overall level of compliance with the applicable legislation. 

64. The audit committee does perform the activities per the points above and actively participates 
in audit steering meetings and reviewing of information produced to assess the credibility of 
such information before going to council. 
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Municipal council 


65. Municipal council actively participates in audit steering meetings and not afraid to question 
information if not sure and committed to see municipality improving audit outcomes. 

MPAC 

66. The extent to which the council adopted the MPAC guides has been considered in the 
assessment of MPAC as an assurance provider. MPAC ensures credible and reliable 
information is produced to council 


STATUS OF IMPLEMENTATION OF COMMITMENTS AND RECOMMENDATIONS 


67. Below is our assessment of the progress in implementing the commitments made by senior 
management, the accounting officer and the audit committee to address prior and current year 
audit findings. 


Table 9 - Progress on key commitments made 


Key role 

Initiatives and 

New 

Focus area 

Progress 

Impact of 

players 

commitments 

commitments 

targeted by 

made with 

initiatives and 


made in the 

made at year 

commitment 

implementing 

commitments 


previous years 

end 


commitments 

on audit 





given 

outcomes 

Mayor 

Accounting 

officer 

Audit 

committee 

HR policy will be 
formulated which 
sets out ways 
and means of 
monitoring and 
evaluating the 
performance of 
all employees 

Refresher workshop 
on code of conduct 
will be held annually 
at the beginning of 
each financial year 
and when the 
employee joins the 
municipality will sign 
the code. 

Code of 
conduct 

In progress 

n/a 

Mayor 

Accounting 

officer 

Audit 

committee 

Compliance 

checklist will be 

formulated 

Resolution has been 
taken by 

management not to 
approve any leave 
during the audit 
period. 

Validity of 
expenditure 

In progress 

Staff were 
available during 
audit period 

Mayor 

Accounting 

officer 

Audit 

committee 

Implementation 
of action plan 
covering internal 

and external 

audit findings 

Performance 

Management 

Framework will be 

reviewed to 

accommodate all 

other staff that are 

Performance 

assessment 

of all staff 

In progress 

n/a 
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Key role 
players 

Initiatives and 

commitments 

made in the 

previous years 

New 

commitments 

made at year 

end 

Focus area 

targeted by 

commitment 

Progress 

made with 

implementing 

commitments 

given 

Impact of 

initiatives and 

commitments 

on audit 

outcomes 


and will be a 

standing item on 

Finance Portfolio 

Committee and 

MANGO 

meetings and will 

be monitored 

below section 57 for 

performance 

assessment in 

December 2015. 




Mayor 

Accounting 

officer 

Audit 

committee 

IT Governance 

Framework 

approved on 26 
June 2014, 
monitoring and 
implementation 

will be done 

Expenditure 

accountant has been 

delegated to check 
each payment 

voucher to ensure 

that the checklist is 

attached and signed 
by all relevant 
colleagues before it 

is submitted for 

payment. 

Authorisation 

of 

expenditure 

payments 

before 

payment is 
processed 

In progress 

n/a 

Mayor 

Accounting 

officer 

Audit 

committee 

Proper record 
keeping will be 

maintained 

where by 
lockable filing 

cabinets will be 

allocated to each 

department and 
a proper registry 

be established 

The clearing of 
suspense account is 

reviewed and 

approved on monthly 
bases by the Acting 

Chief finance officer 

with effect from the 

new financial year 1 
July 2015. 


In progress 

The suspense 

amounts have 

been cleared 

Mayor 

Accounting 

officer 

Audit 

committee 

Controls will be 

implemented 
over daily and 
monthly 
processing and 
reconciling of 

transactions. 

Access to 

approval of 
journals and 

other financial 

KPMG has 

capacitated staff by 
transfer of skills and 
therefore annual 

financial statements 
will be prepared on 
quarterly bases. 

Council resolution 

was taken to deduct 
a portion of 50% 
when the relevant 
debtor comes to the 
municipality to buy 
services and allocate 
that amount to the 


In progress 

To follow up 

commitment 
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Key role 
players 

Initiatives and 

commitments 

made in the 

previous years 

New 

commitments 

made at year 

end 

Focus area 

targeted by 

commitment 

Progress 

made with 

implementing 

commitments 

given 

Impact of 

initiatives and 

commitments 

on audit 

outcomes 


matters assigned 

to divisional 

managers and 

the CFO 

debt owing. 

All reconciliation are 
now performed on a 
monthly basis as 
from the beginning of 
the new financial 
year after the 

implementation of the 
new financial system. 
All employees are on 

the defined benefit 

contribution, 

therefore the 

municipality’s liability 

is limited to what it 

has contributed only. 

Therefore there is no 

provision made as 
when the employee 

when leaves the 

municipality will not 
pay any benefit 
except for leave for 
which provision was 

made. 




Mayor 

Accounting 

officer 

Audit 

committee 

Compliance 

checklist will be 

formulated and 

implemented and 

attached to all 

payment 

vouchers and 

ticked by 
prepare, reviewer 

and authoriser 

The compliance 

checklist is monitored 

by MANCO on a 
weekly to ensure that 
Municipality complies 
with all applicable 
legislation. 


In progress 

Compliance 

issues have 

been identified 

Mayor 

Accounting 

officer 

Audit 

committee 

Design and 
implement formal 

controls over IT 

systems. 

Submission of 

information will 



In progress 

n/a 
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Key role 

Initiatives and 

New 

Focus area 

Progress 

Impact of 

players 

commitments 

commitments 

targeted by 

made with 

initiatives and 


made in the 

made at year 

commitment 

implementing 

commitments 


previous years 

end 


commitments 

on audit 





given 

outcomes 


be centralised at 

municipal 
managers office 

and monitored 






68. 1 7 audit recommendations accepted by management in the prior year regarding matters 
included in the auditor’s report and other important matters were implemented, or alternative 
actions were taken to resolve the finding. 

69. 9 recommendations are still being implemented and [insert number] have not been addressed 
or very limited progress has been made. 

70. Further details on the status of these recommendations are provided in section 8, which 
summarises the detailed audit findings. 

1.12 PART G- OTHER REPORTS 


71 . No other reports were done for this municipality. 

INVESTIGATIONS 

72. An investigation is being conducted regarding the municipal manager who has been 
suspended. The investigation is currently in progress. 

AUDIT-RELATED SERVICES AND SPECIAL AUDITS 

73. No audit related services and special audits conducted. 


SECTION 3: Specific focus areas 


1.13 PART A - PROCUREMENT AND CONTRACT MANAGEMENT 

1.14 

SIGNIFICANT FINDINGS FROM THE AUDIT OF PROCUREMENT AND CONTRACT 
MANAGEMENT 


74. The audit included an assessment of procurement processes, contract management and the 
related controls in place. To ensure a fair, equitable, transparent, competitive and cost- 
effective SCM system, the processes and controls need to comply with legislation and 
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minimise the likelihood of fraud, corruption, favouritism as well as unfair and irregular 
practices. Below is the number and value of contracts and /or quotations tested: 


Extent - awards tested 



Rands 

Contracts (number): 

30 

Contracts (value): 

2 192 997 

Quotations (number): 

30 

Quotations 

(value): 

346 216 

Extent - limitations on 
testing awards 



Rands 

Contracts (number): 

0 

Contracts (value): 

0 

Quotations (number): 

0 

Quotations 

(value): 

0 


A summary of the findings from the audit are as follows: 

Irregular expenditure 

75. R 15 203613 (15.04%) of irregular expenditure incurred in the current financial year was as a 
result of the contravention of SCM legislation. A further R30 766 1 1 7 that 
was incurred in prior years was also identified. 0.12% (100 % prior year) of this irregular 
expenditure was identified during the audit process and not detected by monitoring processes 
of the municipality. The root cause of the lack of effective prevention and detection are 
managements lack of monitoring controls and the inadequate signing of documentation. 


Awards to close family members of persons in the service of the state 

76. The findings were as follows : 

Close family members of 1 official have an interest in awards made to the value of 
R 198 000. This official did not declare their interest and this employee was not involved in 
the procurement process for the award. 


Procurement processes 

77. The following findings on procurement processes result from the testing of 30 contracts with a 
total value of R 2 192 997 and 30 of price quotations with a total value of 
R346 216 

(Include the summaries of findings under the headings below. For each finding, include the number 
of instances and value. Illustrative examples of findings are provided below.) 
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Procurement processes - General 


• Awards made to bidders who were not evaluated on their functionality as per the invitation 

Internal control deficiencies 

78. Lack of adequate monitoring and oversight followed over the procurement and contract 
management as well as compliance to legislation is not adequately adhered to. 

PART B - ROAD INFRASTRUCTURE [IF APPLICABLE] 

79. The audit included an assessment of the roads infrastructure service delivery objective 
relevant to the municipality. For the financial year under review, we focused on the following 

• The existence of a policy, plan and strategy for the upgrade of roads infrastructure 

• Availability of budgeted funds to maintain and upgrade ageing road networks 

• The existence of road maintenance plan 

80. The following findings are relevant. 


No. 

Finding 

Yes / No 

1 

The municipality does not have an approved policy 
in place for the planning, management and 
reporting of roads infrastructure. 

Yes 

2 

The council approved a policy on road 
infrastructure; however, the policy has not been 
implemented. 

No 

3 

The municipality does not have an approved Roads 
Maintenance Plan (RMP)/priority list in place for the 
renewal and routine maintenance of roads 
infrastructure. 

Yes 

4 

The municipality did not perform condition 
assessments for all roads infrastructure under their 
control to inform the RMP/priority list. 

N/A 

5 

The approved RMP/priority list does not provide for 
renewal and routine maintenance of all roads 
infrastructure allocated to the municipality. 

N/A 

6 

The municipality does not have an approved priority 
list of roads infrastructure renewal and routine 
maintenance projects. 

Yes 

7 

The 2014-15 priority list did not include X% of the 
projects as per the RMP. For XX% of the projects 
not included on the priority list the municipality did 
not determine remedial steps to catch up on these 

N/A- 

Municipality 
does not have a 
priority list in 



No. 

Finding 

Yes / No 


planned renewal projects. 

place 

8 

The municipality's roads infrastructure routine 
maintenance budget was inadequate as it did not 
provide for XX% of the planned routine 
maintenance projects included in the priority list for 
2014-15. 

N/A- 

Municipality 
does not have a 
priority list in 
place 

9 

XX% of the municipality's 2014-15 roads 
infrastructure repair and maintenance budget was 
allocated to reactive maintenance while XX% was 
allocated towards routine/ schedule maintenance. 

A split budget 
allocation 
between 
reactive and 
routine 
maintenance 
was not 
performed 

10 

The municipality's roads infrastructure renewal 
budget was inadequate as it did not provide for 

XX% of the planned renewal projects included in 
the priority list for 2014-15. 

N/A- 

Municipality 
does not have a 
priority list in 
place 

11 

0 of the 3 routine maintenance projects planned for 
201 4-1 5 did not take place during 2014-1 5. The 
municipality also did not determine the remedial 
steps required to catch up on these planned routine 
maintenance projects. 

No 

12 

The municipality overspent their 2014-15 roads 
infrastructure repair and maintenance budget by 
24.02% due to excessive wear tear on roads 

Yes 

13 

The actual expenditure for selected roads 
infrastructure maintenance projects are 124% over 
budget. 

Yes 

14 

The selected roads infrastructure routine 
maintenance projects have exceeded the planned 
completion date on average by 0 days/months. 

No 

15 

XX of the XX renewal projects planned for 2014-15 
did not take place during 2014-15. The municipality 
also did not determine the remedial steps required 
to catch-up on these planned renewal projects. 

N/A - The 
municipality 
does not have 
any renewable 
projects 

16 

The municipality underspent/overspent their 2014- 
15 PPE renewal budget by xx% due to 

N/A - The 
municipality 
does not have 
any renewable 
projects 

17 

The actual expenditure for selected roads 
infrastructure renewal projects are xx% over 

N/A - The 
municipality 



No. 

Finding 

Yes / No 


budget. 

does not have 
any renewable 
projects 

18 

The selected roads infrastructure renewal projects 

N/A - The 


have exceeded the planned completion date on 

municipality 


average by XX days/months. 

does not have 



any renewable 
projects 


1.15 PART D - FINANCIAL VIABILITY INDICATORS 

81 . Management is responsible for the sound and sustainable management of the affairs of the 

municipality and for implementing an efficient, effective and transparent financial management 
system for this purpose, as regulated by the MFMA. 

82. Our audit included a high-level assessment of selected financial indicators as at year-end. The 

purpose of the assessment is to provide management with an overview of financial indicators 
to enable timely corrective action where financial health and service delivery may be at risk. 
The information should be used to complement, rather than substitute, management’s own 
financial assessment. 

83. We assessed the municipality’s financial indicators according to the following areas: 

• Expenditure management 

• Revenue management 

• Asset and liability management 

• Cash management 

84. We show our assessment of the financial indicators in the table below and give high-level 
comments on the risks posed by the assessment of the financial indicators. 


FINANCIAL VIABILITY ASSESSMENT TABLE 


Table 11: Financial viability assessment 




FINANCIAL INDICATORS 

■ 


(Limitation = unable to obtain sufficient 
appropriate information to assess the 
indicator) 

AS AT 30 JUNE 
2015 

Movement 

AS AT 30 JUNE 
2014 



EXPENDITURE MANAGEMENT 



1.1 

Creditor-payment period 

112.6 Days 

1.7 Days 

110.9 Days 

REVENUE MANAGEMENT 

2.1 

Debtor-collection period (after 
impairment) 

198.3 Days 

242.4Days 

440.7 Days 
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FINANCIAL INDICATORS 

■ 


(Limitation = unable to obtain sufficient 
appropriate information to assess the 
indicator) 

AS AT 30 JUNE 
2015 

Movement 

AS AT 30 JUNE 
2014 



2.2 

Debtors impairment provision as 
a percentage of accounts 
receivable 

33.7% 

15.3% 

49% 

• Amount of debtors 
impairment provision 

• Amount of accounts 
receivable 

R4 006 707 

R13 265 760 

R2 737 655 

R 503 229 

R 6 744 362 

R13 768 989 

ASSET AND LIABILITY MANAGEMENT 

3.1 

A deficit for the year was realised 
(total expenditure exceeded total 
revenue) 

No 

n/a 

Yes 

• Amount of the surplus / 

(deficit) for the year 

R28 728 347 

R23 789 

922 

R (4 938 425) 

3.2 

A net current liability position was 
realised (total current liabilities 
exceeded total current assets) 

No 

n/a 

No 


• Amount of the net current 
assets / (liability) position 

R279 880 050 

R32 711 
150 

R247 168 900 

3.3 

A net liability position was 
realised (total liabilities exceeded 
total assets) 

No 

n/a 

No 


• Amount of the net asset / 
(liability) position 

R 279 880 052 

R32 711 
150 

R 247 168 900 

3.4 

Percentage of PPE and/or 
intangible assets impaired 

0.78 % 


0% 


• Amount of PPE and intangible 
assets impairment provisions 

RO 

n/a 

RO 

3.5 

Percentage of loan receivables 
(loans awarded) and/or 
investments impaired 

0% 

n/a 

0% 


• Amount of loan receivables 
(loans awarded) and 
investments impairment 
provisions 

RO 

n/a 

RO 

CASH MANAGEMENT 

4.1 

The year-end bank balance was 
in overdraft 

No 

n/a 

No 

Amount of year-end bank balance 
(cash and cash equivalents) / 

(bank overdraft) 

R9 050 757 

R8 019 771 

R1 030 986 

4.2 

Net cash flows for the year from 
operating activities were negative 

No 

n/a 

No 

Amount of net cash inflow / 

R48 169 750 


R7 570 466 
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FINANCIAL INDICATORS 


(Limitation = unable to obtain sufficient 
appropriate information to assess the 
indicator) 


AS AT 30 JUNE 
2015 


Movement 


AS AT 30 JUNE 
2014 



(out)flows for the year from 
operating activities 


R40 599 
264 


4.3 

Current liabilities as a percentage 
of net cash inflows for the year 
from operating activities 

45.8% 

161.98% 

207.78% 

• Amount of current liabilities 

• Amount of net cash inflows for 
the year from operating 
activities 

R22 065 165 

R48 169 750 

R6 107 325 
R40 489 
579 

R15 957 930 

R7 680 171 

4.4 

Creditors as a percentage of cash 
and cash equivalents 

157% 


738% 

• Amount of creditors (accounts 
payable) 

• Amount of cash and cash 
equivalents / (bank overdraft) 
at year-end 

R14 232 222 

R9 050 757 

R 4 488 089 

R7 731 559 

R9 744 133 

R1 319 198 

OVERALL ASSESSMENT 



Overall the results of the above financial indicator 
evaluation is assessed as: 

Yellow 

(Unfavourable 

indicators) 


Yellow 

(Unfavourable 

indicators) 

Green (No 
material 
unfavourable 
indicators) 


Green (No 
material 
unfavourable 
indicators) 


* This (these) amount(s) has (have) been adjusted for uncorrected 

misstatements that resuited in the modification of the audit opinion and wiii 
therefore not agree to the financiai statement amounts^ 


►improved® ^Unchanged^Regressed 


1.16 PARTE -USE OF CONSULTANTS 

85. The audit included an assessment of the use of consultants. In the public sector environment, 
the partnership between the private and public sector has become important in driving 
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strategic goals. [Include if findings identified - To optimise the value of this partnership, we 
identified areas that needs attention to get the best value for money]. 

The table below shows the extent and nature of the municipality’s use of consultants: 


Table 12: Consultant services 


Type of consultancy services 

Number of 
consultants 

Expenditure (R) 

Financial reporting services 

1 

R 7 820 991 

Preparation of performance information 

0 

0 

IT related services 

0 

0 

Other consultancy services 

0 

0 


86. The table below shows the consultancy contracts tested and related audit findings. 


Table 13: Consultant contracts tested 


Name of 
consultant 

Description 
of service 

Value of 
contract (R) 

Reas 
on for 
appoi 
nting 
consu 

Itant 

Material 
misstatements 
or findings 
identified in 
areas of 
consultant’s 
responsibilities? 

Reasons for 
findings/ 
misstatements 
not prevented 
by use of 
consultant 

Areas 

of 

finding 

KPMG 

Preparation of 
financial 
stateme 

nts 

R 7820991 

Lack of 
skills 

[Yes - in the area of 
the annual financial 
statements - This 
evidences a material 
misstatement in the 
annual financial 

statements which can 
result in a 

qualification of the 
audit opinion 

Onsultant could not 
get adequate 

information from 
the municipality 

Internal 

capacity 

Transfer 
of skills 


1.17 PART F- FRAUD 


87. The primary responsibility for the prevention and detection of fraud rests with management 
and those charged with governance. We are responsible for obtaining reasonable assurance 
that the financial statements are free from material misstatement, whether caused by fraud or 
error. Due to the inherent limitations of an audit, there is a risk that some material 
misstatements, including fraud, may not be detected. 
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There was no fraud identified as a result of SCM. 


1.18 PART G - CONSEQUENCES MANAGEMENT 

88. Section 62 (1 ) (d) requires that the accounting officer implements measures to prevent 

unauthorised, irregular as well as fruitless and wasteful expenditure. The table below reflects 
the status of UIFW not prevented. 

Table 14 - Unauthorised, irregular and fruitless and wasteful expenditure 


Description 

Unauthorised 

expenditure 

(R) 

Irregular 

expenditure 

(R) 

Fruitless and wasteful 
expenditure 

(R) 

Total incurred for the 
year 

0 

45 969 730 

328 119 

Total identified during 
the audit 

0 

124 88 

0 

Total identified by the 
auditee 

0 

15 078 725 

0 

Total number of 
instances identified 

0 

8 

2 

Value of goods and 
services tested for 
irregular expenditure 
incurred 

0 

15 203 613 

328 119 

Value of limitations 

0 

0 

0 

Total investigated 

0 

0 

0 

Total written off 

0 

0 

0 

Total condoned 

0 

0 

0 


SIGNIFICANT FINDINGS FROM THE AUDIT OF CONSEQUENCES MANAGEMENT 

89. The MFMA and their regulations clearly stipulate that matters such as incurring unauthorised, 
irregular as well as fruitless and wasteful expenditure, the possible abuse of the SCM system 
(including fraud and improper conduct) and allegations of financial misconduct should be 
investigated, and disciplinary steps taken based on the results of the investigations. No 
disciplinary steps have been taken. 
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Inadequate measures to manage consequences 

90. The following measures were not implemented to ensure that the environment is conducive for 
effective consequences management: 

• A disciplinary board was not established to investigate allegations of financial misconduct 
and monitor the institution of disciplinary proceedings against an alleged transgressor; 

• The municipality did not adopt system (policies) for investigations of allegations of 
misconduct; and disciplinary procedures. 

Failure to implement consequences 

91 . The table below provides a summary of transgressions from the prior year which were either 
not investigated or instances where proper disciplinary steps were not taken after 
investigation. 


Irregular/ fruitless and wasteful expenditure 


Finding 

Number of 
instances 

Value (R) 

Unauthorised expenditure identified in prior year was not 
investigated to determine if a person was liable for the 
expenditure 


0 

Irregular expenditure identified in prior year was not 
investigated to determine if a person was liable for the 
expenditure 

8 

30 766 117 

Fruitless and wasteful expenditure identified in prior year was 
not investigated to determine if a person was liable for the 
expenditure 

2 

328 119 

Effective and appropriate disciplinary steps were not taken 
against officials who made and/or permitted unauthorised 
expenditure 

n/a 

n/a 

Effective and appropriate disciplinary steps were not taken 
against officials who made and/or permitted irregular 
expenditure 

8 

30 766 117 

Effective and appropriate disciplinary steps were not taken 
against officials who made and/or permitted fruitless and 
wasteful expenditure 

2 

328 119 

Losses resulting from unauthorised expenditure were not 
recovered from the liable person 

0 

0 

Losses resulting from irregular expenditure were not recovered 
from the liable person 

8 

30 766 117 

Losses resulting from fruitless and wasteful expenditure were 
not recovered from the liable person 

2 

328 119 

Unauthorised expenditure was approved by authorities that do 
not have the authority to approve such unauthorised 


0 
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Finding 


Number of Value (R) 
instances 


expenditure 


Irregular expenditure was condoned by authorities that do not 
have the authority to condone such irregular expenditure 

0 

0 

Any other UIFW related finding 

0 

0 


Possible fraud and improper conduct in SCM 


Finding 

Number of 
instances 

Value (R) 

Allegations of [fraud and/or corruption and/or improper conduct 
and/or failure to comply with the supply chain management 
system] against [officials and/or role player in the supply chain 
management system] were not investigated 

0 

0 

Appropriate action was not taken against [officials and/or role 
players] in the supply chain management system where 
investigations proved [fraud and/or corruption and/or improper 
conduct and/or failure to comply with the supply chain 
management system] 

0 

0 

Allegations of [theft / fraud / extortion / forgery / uttering a 
forged document] which exceeded R100 000 were not 
reported to the South African Police Service 

0 

0 

Confirmed cases of improper conduct in the supply chain 
management system that constituted a crime were not always 
reported to the South African Police Service 

0 

0 

Any other finding related to “Possible fraud and improper 
conduct in SCM" 

0 

0 


Financial misconduct 


Finding 

Number of instances 

Investigations were not conducted into allegations of financial 
misconduct committed by officials 

0 

Disciplinary hearings were not held for confirmed cases of financial 
misconduct committed by officials 

0 

Investigations into allegations of financial misconduct against the 
accounting officer were not conducted 

0 

Disciplinary hearings were not held for confirmed cases of financial 
misconduct committed by the accounting officer 

0 

Any other financial misconduct related finding 

0 

None 

0 
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Transgressions identified in the current year 


92. Irregular/ fruitless and wasteful expenditure disclosed in note (xx) to the financial statements 
must be investigated to determine if any official is liable for losses incurred as a result of the 
irregular/ fruitless and wasteful] expenditure. Disciplinary steps must be taken against official 
who caused or permitted the irregular/ fruitless and wasteful expenditure and losses incurred 
as a result of the irregular/ fruitless and wasteful expenditure must be recovered from the 
liable person. 

93. This report includes other audit findings which are indicative of transgressions by officials or 
other role players. Summarised in the table below are allegations of transgressions which 
must be investigated and disciplinary steps taken based on the results of the investigations: 


Allegations of transgressions requiring investigation 


Finding 

Number of 
instances 

Value (R) 

Official fail to disclose own interest or that of close family 
members, partners or associates in contracts 

0 

0 

Supplier submitted false declaration of interest 

0 

0 

Payments made to fictitious suppliers 

0 

0 

Possible performance of additional remunerative work without 
approval; 

0 

0 

a) Lack of delivery or poor performance by contractor; 

0 

0 

(Add any other transgression that is indicative of possible 
fraud, improper conduct in SCM, and/or non-compliance with 
thee SCM policy) 

0 

0 

(Add any other transgression indicative of financial misconduct 
by officials) 

0 

0 

(Add any other transgression indicative of financial misconduct 
by accounting officer/ authority,) 

0 

0 

[Unauthorised, irregular and fruitless and wasteful] expenditure 

caused or permitted bv the accountinq officer/ authority 



1.19 
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1.20 


1.21 

1.22 PART H - MANAGEMENT OF CONDITIONAL GRANTS 


SIGNIFICANT FINDINGS FROM THE AUDIT OF MANAGEMENT OF CONDITIONAL GRANTS 
Utilisation of conditional grants received 


For the financial year under review, the audit included an assessment of the effectiveness of the 
municipality’s utilisation of the following conditional grants received: 

• Equitable share 

• Expanded public works programme grant 

• Financial management grant 

• Municipal system improvement grant 

• Cybercadet grant 

• Sport and recreation grant 

• Library grant 

• Qedisimo project 

• Municipal infrastructure grant 

• Electrification grant 


The table below provides a summary of audit findings identified for each grant: 

Table 15: Conditional grant management 


Detail 

Equitable share 

Municipal 

infrastructure 

Electrification grant 

Total available to spend 

R65 879 000 

R31 548 000 

R4 000 000 

Total amount utilised/ spent in current 
financial year 

R65 879 000 

R31 548 000 

R4 000 000 

Unspent allocation 

R 0 

R 0 

R 0 

Percentage of under/(over)spending 

0% 

0% 

0% 

Reasons for significant under-spending 
(more than 10%) or any overspending - as 
provided by management 

N/A- The grant 
expenditure 
equalled the 
receipts 

N/A - The grant 
expenditure 
equalled the 
receipts 

N/A - The grant 
expenditure equalled 
the receipts 


94. For each of the capital/ infrastructure grants tested as per the table above, we selected a key 
project and audited the utilisation of the grant on the project. The table below depicts the audit 
finding identified for each project. 
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Table 15: Conditional grant project detail 


Detail 

Municipal infrastructure 

Electrification grant 

Key projects tested 

MIG- ESAKHILE 
ACCESS ROAD 

Vumanhiamvu 

electrification 

Outputs linked to 
selected key project 

To complete the road 
to the required quality 

To connect 
electricity to 
households that 
are deficient in 
this regard 

Planned completion 
date 

June 2015 

June 2015 

Expected/actual 
completion date 


June 2016 

Reasons for exceeding 
planned completion 
date 


These projects 
coincide with 
projects 
performed by 
Eskom. The 
municipality has 
to wait for 
Eskom to 
complete work. 

Approved (original) 
budgeted project cost 

R 16 645 508 

R 20 356 684.42 

Revised (latest) 
estimate of project cost 
(approved) 

No revision 
performed 

R 23356684.42 

Actual amount spent on 
the project - current 
year 

R 1 130 342 

R 5299160.43 

Total amount spent 
from initiation to date 

R 1 130 342 

R 16947395.08 

Project status as at 
year end 

In progress 

Not completed 

The municipality 
evaluates its 
performance in respect 
of the project 

Yes 

Yes 

Key planned target/ 
project milestone for 
the current year. 

To appoint a 
service provider 
and to complete 
the project 

To electrify 736 
houses 

Planned targets (key 
milestone) for the 
selected project were 
achieved 

Appointment of 
service provider 
achieved 

The completion 
of the project 
was not 

No 
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Detail 

Municipal infrastructure 

Electrification grant 


achieved 


Reported performance/ 
achievement of targets 
is correct (Yes/ No) 

Yes 

Yes 

Project tested under 
SCM? 

Yes - no findings 
identified / 

Yes - no findings 
identified / 

SCM findings raised 

N/A 

N/A 

Project tested under 
assets? 

Yes - no misstatements 
identified 

Yes - no 
misstatements 
/identified 

Receipt of goods/ 
services tested? 

Yes - no misstatements 
identified 

Yes - no 
misstatements 
identified 

Other findings identified 

N/A 

N/A 


SECTION 4: EMERGING RISKS 


Accounting, performance management / reporting and compliance matters 


Standards of GRAP 

95. In July 2014 the Minister of Finance prescribed the application of the following Standards of 
GRAP for financial years beginning on or after 1 January 201 5 for the types of auditees 
indicated: 

• GRAP 1 05 Transfers of functions between entities under common control 

• GRAP 1 06 Transfers of functions between entities not under common control 

• GRAP 107 Mergers 

96. The ASB has issued the following additional standards of GRAP for which effective dates have 

not yet been gazetted by the Minister of Finance: 

• GRAP 20 Related party disclosures 

• GRAP 32 Service concession arrangements: Grantor 

• GRAP 108 Statutory receivables 
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Municipal SCOA 

97. Nkandia Municipality is not a pilot site for the Municipal Standard Chart of Accounts (MSCOA) 
implementation and will therefore only need to go live with MSCOA on the 
1 July 2017. Currently the municipality has not taken any steps to ensure that it will be able to 
meet this National Treasury deadline and has failed to submit the required project documents 
to National Treasury for review. The municipality needs to prioritise tabling the Municipal 
Regulations on a Standard Chart of Accounts to the municipal council and registering a formal 
MSCOA project at the municipality. A project sponsor from within the municipality should be 
appointed to drive the project and an MSCOA project plan must be developed and submitted 
to National Treasury for review. 


SECTION 5: Entities controlled by the municipality 

98. No entities are controlled by the municipality. In terms of the MFMA, the municipality has 
certain oversight responsibilities regarding the municipal entities over which it has control. 


SECTION 6: Ratings of detailed audit findings 

99. For the purposes of this report, the detailed audit findings included in annexures A to C have 
been classified as follows: 

100. Matters to be included in the auditor’s report: These matters should be addressed as a 
matter of urgency. 

101 . Other important matters: These matters should be addressed to prevent them from leading to 
material misstatements of the financial statements or material findings on the performance 
report and non-compliance with legislation in future. 

102. Administrative matters: These matters are unlikely to result in material misstatements of the 
financial statements or material findings on the performance report and non-compliance with 
legislation. 


SECTION 7: CONCLUSION 

1 03. The matters communicated throughout this report relate to the three fundamentals of internal 
control that should be addressed to achieve sustained clean administration. Our staff 
remains committed to assisting in identifying and communicating good practices to improve 
governance and accountability and to build public confidence in government’s ability to 
account for public resources in a transparent manner.jYours faithfully 


Jabulani Nkosi 
Senior Manager: KZN 
Date: 17 November 201 5 

Enquiries: Don Naicker 

Telephone: 033-2647499 

Fax: 033-264 7485 
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Email: 


donnx@agsa.co.za 


Distribution: 

Municipal Manager 
CFO 

Audit committee 
Head of internal audit unit 


SECTION 8; SUMMARY OF DETAILED AUDIT FINDINGS 

P 

ag 

e 

no 

Finding 

Misstatements in financial statements 

Misstatements in annual performance report ^ 

0) 

Non-compliance with legislation ~ 

o' 

Internal control deficiency S. 

o' 

Service delivery ^ 

Matters affecting the auditor’s report 

Other important matters “ 

Administrative matters 

Number of 
times reported 
in previous 
three years 

Status of 
implementation of 
previous year(s) 
recommendation 

46 

Acting position occupied for 
more than three months 









- 

N/A 

48 

Resignation notice period 
less that 30 days 









- 

N/A 

48 

Expenditure : Evidence not 
submitted for audit purposes 









- 

N/A 

50 

Rateable valuation 
reconciliation not performed 









- 

N/A 

50 

Information not displayed on 
website 









- 

N/A 

52 

Deficient credit control and 
debt collection policy 









- 

N/A 
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53 

Asset additions - information 
not provided for audit 
purposes 









- 

N/A 

54 

Bidders not evaluated on 
functionality as per the 
invitation 









- 

N/A 

55 

Creditors sub-ledger and 
supplier reconciliations not 
performed 









2 

In progress 

56 

Statement of changes in Net 
assets 









1 

Not addressed 













INFORMATION SYSTEMS AUDIT 

58 

IT Governance Framework 
not comprehensively 
documented and has not 
been approved 









- 

N/A 

59 

IT steering committee not 
established 









- 

N/A 

60 

No IT risk register in place 









- 

N/A 

61 

It service provider 
performance not formally 
reviewed and reported on 









1 

Not addressed 

62 

Internet and security policy 
does not contain sufficient 
information 









- 

N/A 

63 

No patch management policy 
in place 









1 

Not addressed 

64 

Password policy 
inadequately documented 
and inadequate password 
settings configured on 
system 









1 

Not addressed 

65 

No user awareness training 
on IT security 









- 

N/A 

66 

System username not 
compliant to the approved 









- 

N/A 
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user naming convention 











67 

Formal reviews and 
monitoring of login violations 
not performed 









- 

N/A 

68 

User access and 
administration procedure not 
approved 









1 

Not addressed 

69 

No documentation completed 
for administrator access 
rights granted 









1 

Not addressed 

70 

Register for the allocation of 
Microsoft licences not 
completed 









1 

Not addressed 

71 

User access rights not 
periodically reviewed 









1 

Not addressed 

72 

User access forms not 
completed 









- 

N/a 

74 

System administration 
activities not reviewed 









1 

Not addressed 

75 

Service provider responsible 
for administration of HR and 
Payroll system 









1 

Not addressed 

76 

Business continuity plan not 
established and disaster 
recovery plan not tested 









1 

Not addressed 

78 

Deficiencies noted with 
regard to back up processes 
currently performed 









1 

Not addressed 

80 

Emergency change 
procedures not documented 









- 

N/A 

81 

System change logs not 
available 









1 

Not addressed 

82 

No server room maintenance 
schedule in place 









1 

Not addressed 

83 

No firewall policy in place 









- 

N/A 
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84 

Inadequate commenting on 
firewall rules 









- 

N/A 

85 

Outdated firewall software 
version 









- 

N/A 

86 

No review of firewall logs and 
configuration 









- 

N/A 

87 

Insecure network services 









- 

N/A 

88 

Deficiencies noted on the 

EFT processes performed 









- 

N/A 


Detailed audit findings 


ANNEXURE A: MATTERS AFFECTING THE AUDITOR’S REPORT 


1 . Acting position occupied for more than 3 months 
Audit finding 

Section 56(1 )(a) of the Municipal Systems Act states that a municipal council, after consultation with 
the municipal manager, must appoint - 

(ii) an acting manager directly accountable to the municipal manager under circumstances and for a 
period as prescribed 

(c) A person appointed in terms of paragraph (a)(ii) may not be appointed to act for a period that 
exceeds 3 months: Provided that a municipal council may, in special circumstances and on 
good cause shown, apply in writing to the MEC for local government to extend the period of 
appointment contemplated in paragraph (a), for a further period that does not exceed 3 months 

A decision to appoint a person referred to in subsection 1(a)(ii), and any contract concluded 

between the municipal Council and that person in consequence of the decision, is null and void 
if 

a) the person appointed does not have the prescribed skills, expertise, competencies or 
qualifications 

b) the appointment was otherwise made in contravention of this Act 

During the audit of employee costs, it was noted that Ms DK Khuzwayo (5074) has occupied the 
position of Acting Director: Community Services for the following months: 


Months 

Number of Months 

February 201 5 to current 30 June 2015 

9 


The council through its meeting held on 25 June 2015 condoned the appointment of 

Ms DK Khuzwayo as the acting Director: Community Services effective from 28 May 2015. The copy 
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of the resolution together with a memorandum was forwarded to a representative from COGTA on 3 
July 2015. 

However, the above appointment is deemed to be in contravention of the Municipal System Act for 
the following reasons: 

1 . The period of Acting has exceeded the maximum 6 months permitted under the legislation. 

2. There is no evidence to indicate that the extension of the appointment period was 
appropriately authorised by the MEC. 

This results in a contravention of the Municipal Systems Act which renders the appointment null and 
void. 


Internal control deficiency 

The municipality did not have adequate internal processes and procedures in place to ensure 
full adherence to applicable legislation. 

Recommendation 

The Municipality must ensure that all legislative requirements are satisfactorily met for its acting 
positions. 

Management response 

Agreed: All acting positions in 2015/2016 are reviewed in every three monthsand the council will 
solicit an MEC approval where the acting will exceed three months. 

Name : S.B Sibisi 

Position : Acting Municipal Manager 

Date: 16 November 201 5 

Auditor’s conclusion 

Management response noted, however this will be reported as a non-compliance to the municipal 
systems act. 
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ANNEXURE B: OTHER IMPORTANT MATTERS 


OTHER IMPORTANT MATTERS 

2. Resignation notice period less than 30 days 
Audit finding 

In terms of paragraph 22 of the employment contract an employee must give the municipality 
30 days’ notice for termination of the contract. 

During the audit of employee terminations, it was noted that the following employee did not serve 
the full 30 day notice period prior to resignation 


Employee 

Code 

Initials and 
Surname 

Notice period as per resignation 
letter 

Number of days 

KZ286256 

MS THABEDE 

10 November 2014 to 5 December 

26 

2014 

This results in non-compliance wi 

th the municipality's policies and procec 

ures 


Internal control deficiency 

The Municipality did not establish and communicate policies and procedures to enable and support 
understanding and execution of internal control objectives. 

Recommendation 

Senior management must scrutinise resignation letters to ensure that the correct notice period will 
be served in accordance with municipal policies and agreements. 

Management response 

Agreed:where number of days given as notice is less than 30 days, leave days will be deducted at 
pay-out to coverthe days where the notice days not served. 

Name : N.P Xulu 

Position : Director Corporate Service 

Date: 16 November 201 5Name: 

Auditor’s conclusion 

Management response noted and will be followed up in the next year audit. 
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3. Expenditure: Evidence not submitted for audit purposes 
Audit finding 

In terms of section 62(1 )b of the Municipal Finance Management Act, the accounting officer of the 
Municipality is responsible for managing the financial administration of the Municipality, and must for 
this purpose take all reasonable steps to ensure that full and proper records of the financial affairs of 
the Municipality are kept. 


The following is a list of items where no sufficient evidence has been provided to the auditors as per 
the information request documents. The turnaround time for submission of evidence is 2 days as 
stipulated therein: 


Date 

Description 

Nature of expense 

Amount (R) 

20150629 

GG00042 

EXTERNAL AUDIT FEES 

24 472.93 

20-JUI-15 

SINV507A1 0046730 

TELEPHONE 

19 817.94 

08-JUI-15 

SINV90369935 

IT SUPPORT 

51 338.30 

20150228 

FIN90590008820 

EXTERNAL AUDIT FEES 

1 618.59 

20150430 

FIN90590009013 

IT SUPPORT 

26 720.00 

20140731 

0001001609 

PUBLIC PARTICIPATION 

75 200.00 


199 167.76 


Failure to submit the necessary evidence will result in a limitation of scope and impact the outcome 
of the audit report 

Internal control deficiency 

The Municipality did not implement proper record keeping in a timely manner to ensure that 
complete, relevant and accurate information is accessible and available to support financial and 
performance reporting 

Recommendation 

• The Municipality must follow up and ensure all outstanding evidence is submitted to the 
auditors. 

• The accounting officer is required to take decisive actions to ensure that records 
management gets the necessary attention. 

Management response 

Agreed: 

All irregular expenditure will be subjected to the processes outlined in section 32 of the Municipal 
Finance Management Act. The accounting officer will take decisive action to ensure that SCM 
processes are complied with. 

Open tender documents will be limited only to SCM personnel, where copy documents are required; 
copies will be made by SCM personnel and original documents are not removed from SCM files. 
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Name: B.H Bhengu 

Position: Acting Chief Finance Officer 

Date: 16 November 201 5 

Auditor’s conclusion 

Management response noted, however the amount of R199 167 will be taken to the schedule of 
overs and under. 


4. Rateable Valuation Reconciliation not performed 
Audit finding 

Section 97 of the Municipal Finance Management Act states that the accounting officer of the 
Municipality must take all reasonable steps to ensure that: 

(e) the revenue due to the Municipality is calculated on a monthly basis 

(i) the Municipality has and maintains a system of internal control in respect of debtors and 
revenue 

During the audit of revenue it was noted that rateable valuation reconciliation between the property 
register and the rates levied during the financial period was not performed by the Municipality. 

This could result in material misstatements of the rates revenue in the annual financial statements 
as discrepancies may not be detected and resolved in a timely manner. 

Internal control deficiency 

The accounting officer did not implement controls over the daily and monthly processing and 
reconciling of revenue transactions. 

Recommendation 

• To enhance its control environment, the Municipality must ensure that this reconciliation is 
performed regularly. 

• The reconciliations must be monitored and reviewed by senior management to ensure that 
differences are investigated and resolved in a timely manner. 

Management response 

Agreed: 

The rate able valuation reconciliation between the property register and the rates levied during the 
financial period will be performed by the Municipality on Monthly bases. 

Name : B.H Bhengu 

Position: Acting Chief Finance Officer 

Date: 16 November 201 6 

Auditor’s conclusion 

Management response noted and will be followed up in the next year audit. 


5. Information not displayed on website 
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Audit finding 

In terms of section 75(1 ) of the Municipal Finance Management Act, the accounting officer of a 
Municipality must place on the website the following documents of the Municipality: 

a) The annual and adjustments budgets and all budget related documents 

b) All budget related policies 

c) The annual report 

d) The performance agreements required in terms of section 57(1 )(b) of the Municipal Systems 
Act 

e) All service delivery agreements 

f) All long term borrowing contracts 

g) All supply chain management contracts above a prescribed value 

h) All information statement containing a list of assets over a prescribed value that have been 
disposed of in terms of section 14(2) or (4) during the previous quarter 

i) Contracts to which subsection (1 ) of section 33 apply, subject to subsection (3) of that 
section 

j) Public - private partnership agreements referred to in section 120 

k) All quarterly reports tabled in the council in terms of section 52 (d); and 

l) Any other documents that must be placed on the website in terms of this Act or any other 
applicable legislation, or as may prescribed 

(2) A document referred to in subsection (1 ) must be placed on the website not later than 5 days 
after its tabling in the council or on the date on which it must be made public, whichever occurs first. 

Section 23 of the Municipal Property Rates Act states that 

1 ) A Municipality must draw up and maintain a register in respect of properties situated within 
that Municipality 

4) The register must be open for inspection by the public during office hours. If the Municipality 
has an official website or another website available to it, the register must be displayed on 
that website 

During the audit, it was noted that the Municipality's website has not been updated with 
the information as outlined in the legislation above. 

The documents per the MFMA that are required to be uploaded on the website will not be available 
for public inspection. This may result in lack of public awareness on the operations, achievements 
and performance of the Municipality. 

Internal control deficiency 

The accounting officer did not monitor compliance with all related laws and regulations 

Recommendation 

To promote public transparency, the Municipality must liaise with the website administrators and 
ensure that all necessary documents are uploaded on the website within the prescribed timeframe 

Management response 

Agreed: 

The Municipality's website will be updated with the information as outlined in the legislation. 

A document referred to section 75(1) of the Municipal Finance Management Act in subsection (1) 
will be placed on the website not later than 5 days after its tabling in the council or on the date on 
which it must be made public, whichever occurs first. 

Name: S.B. Sibisi 

Position: Acting Municipal Manager 
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Date: 16 November 2015 


Auditor’s conclusion 

Management response noted and the updating of the Municipal website with the relevant documents 
will be followed up at the next year audit. 


6. Deficient credit control and debt collection policy 
Audit finding 

In terms of section 97(1) of the Municipal Systems Act, a credit control and debt collection policy 
must provide for - 

a) credit control procedures and mechanisms 

b) debt collection procedures and mechanisms 

c) provision for indigent debtors that is consistent with its rates and tariff policies and any 
national policy on indigents; 

d) realistic targets 

e) interest on arrears where appropriate 

f) extension of time for payment of accounts 

g) termination of services or the restriction of the provision of services when payments are in 
arrears 

h) matters relating to unauthorised consumption of services, theft and damages 

During the audit, it was noted that the Municipality's credit control and debt collection policy does 
not make any provision for matters relating to unauthorised consumption of services, theft and 
damages. This is a concern as the Municipality has incurred electricity losses of 25% which is 
outside the norms of 5 - 6%. 

This results in non-compliance with the Municipal Systems Act. 

The municipality may not be adequately equipped to counteract unauthorised consumption of 
services and theft. 

Internal control deficiency 

The Municipality did not review and monitor compliance with applicable legislation. 

Recommendation 

• The Municipality should revise the credit control and debt collection policy to include this 
provision. 

• Prior to adoption, all draft municipal policies must be scrutinised against applicable 
legislation to ensure compliance and cohesion. 

Management response 

Agreed: 

The debt collection policy will be reviewed in 2015/2016 financial year to make provision for matters 
relating to unauthorised consumption of services, theft and damages 

Name: B.H Bhengu 

Position: Acting Chief Finance Officer 

Date: 16 November 2015 
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Auditor’s conclusion 


Management response is noted and the revision of the debt and credit control policy to include a 
section relating to unauthorised consumption of services, theft and damages will be followed up at 
the next year audit. 


7. Asset Additions - Information not provided for audit purposes 
Audit finding 

In terms of section 62(1 )b of the Municipal Finance Management Act, the accounting officer of the 
Municipality is responsible for managing the financial administration of the Municipality, and must for 
this purpose take all reasonable steps to ensure that full and proper records of the financial affairs of 
the Municipality are kept. 

The following is a list of asset additions where no sufficient evidence has been provided to the 
auditors as per the information request documents. The turnaround time for submission of evidence 
is 2 days as stipulated therein: 


Number 

EFT Number 

Payee Name 

Amount 

Invoice number 

1 

CF151114 

Impumelelo Engineers 

71 694.00 

02 

2 


Retention as per Technical Dept. 

31 960.50 


3 


Retention as per Technical Dept. 

150 389.31 




Total 

254 043.81 



Failure to submit the necessary evidence will result in a limitation of scope and impact the outcome 
of the audit report 


Internal control deficiency 

The Municipality did not implement proper record keeping in a timely manner to ensure that 
complete, relevant and accurate information is accessible and available to support financial and 
performance reporting 

Recommendation 

• The Municipality must follow up and ensure all outstanding evidence is submitted to the 
auditors. 

• The accounting officer is required to take decisive actions to ensure that records 
management gets the necessary attention. 

Management response 

Agreed 

The Municipality will establish the effective registry and archives and implement proper record 
keeping in a timely manner to ensure that complete, relevant and accurate information is accessible 
and available to support financial and performance reporting. 
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Name: B.H Bhengu 

Position: Acting Chief Finance Officer 

Date: 16 November 201 5 

Auditor’s conclusion 

Management response is noted and the amount of R254 044 will be taken to the schedules of overs 
and under. 


8. Bidders not evaluated on functionality as per the invitation 
Audit finding 

In terms of section 4 of the PPR: 

1 ) An organ of state must indicate in the invitation to submit a tender if that tender will be evaluated 
on functionality. 

2) The evaluation criteria for measuring functionality must be objective. 

3) When evaluating tenders on functionality the: 

a) evaluation criteria for measuring functionality 

b) weight of each criterion 

c) applicable values 

a) minimum qualifying score for functionality must be clearly specified in the invitation to 
submit a tender. 

4) No tender must be regarded as an acceptable tender if it fails to achieve the minimum qualifying 
score for functionality as indicated in the tender invitation. 

5) Tenders that have achieved the minimum qualification score for functionality must be evaluated 
further in terms of the preference point systems prescribed in regulations 5 and 6. 

During the audit it was noted that the invitation to tender for diaries, calendars and name tags dated 
on 27/11/2014, stipulated that the potential bidders will be evaluated on functionality based on 
capacity and experience. However no evidence was provided to indicate that functionality was 
evaluated. The final award was made to CA General Supplies and Services at an amount of 
R124 888.00 

Failing to implement adequate evaluation processes could result in the winning provider not having 
the necessary experience and capacity to perform the services required by the municipality. 

Internal control deficiency 

Lack of review by the accounting officer to ensure that the evaluation was performed in accordance 
with the evaluation criteria per the invitation. 

Recommendation 
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The SCM unit must ensure that the evaluation criteria are adequately fulfilled before making the final 
award. Any evaluation where potential bidders fail to meet the minimum qualifying score for 
functionality must be disregarded. 


Management response 

Agreed: 

All the potential bidders will be evaluated on functionality based on capacity and experience. The 
supply chain policy will be reviewed and all adverts issued for tenders will specify that the company 
profile is one of the requirements. 

Name : B.H Bhengu 

Position : Acting Chief Finance Officer 

Date: 16 November 201 5 

Auditor’s conclusion 

Management response is noted and the amount of R124 888 will be taken to the schedule of overs 
and under. 


9. Creditors sub ledger and supplier reconciliations not performed 
Audit finding 

In terms section 62(b) of the Municipal Finance Management Act, the accounting officer is 
responsible for managing the financial administration of the Municipality and must for this purpose 
take all reasonable steps to ensure that full and proper records of the financial affairs of the 
municipality are kept in accordance with any prescribed norms or standards. 

During the audit of payables, it was noted that the following reconciliations are not performed by the 
Municipality: 

• Reconciliation between the creditors sub ledger and the general ledger 

• Reconciliation between supplier statements and creditors control accounts 

This could result in possible misstatements of the payables balance in the annual financial 
statements as errors may not be easily identified by the Municipality. 

The Municipality will not be in a position to adequately address supplier queries which could lead to 
disgruntled suppliers. 

Fruitless and wasteful expenditure may be incurred due to interest on overdue accounts. 

Internal control deficiency 

The accounting officer did not implement controls over the daily and monthly processing and 
reconciling of creditor transactions. 

Recommendation 

• To enhance its control environment, the accounting officer must ensure that these 
reconciliations are performed on a regular basis. 
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• The reconciliations must be monitored and reviewed by senior management to ensure that 
differences are investigated and resolved in a timely manner. 

Management response 

Agree to the finding, this has been addressed in the new financial system. 

The Reconciliation between the creditors sub ledger and the general ledger are performed and 
reconciliation between supplier statements and creditors control accounts are performed 

Name: Bafana Bhengu 
Position: Acting CFO 
Date: 06 November 201 5 

Auditor’s conclusion 

Management response noted and will be followed up in the next year qaudit. 


10. Statement of Changes in Net Assets 
Audit finding 

In terms of section 122 of the Municipal Finance Management Act, every municipality must for each 
financial year prepare annual financial statements which: 

(1)(a) Fairly presents the state of affairs of the municipality, its performance against budget, its 
management of revenue, expenditure, assets and liabilities, its business activities, its financial 
results and its financial position as at the end of the financial year 

The Municipality's accounting policies also states that the annual financial statements have been 
prepared in accordance with the Standards of Generally Recognised Accounting Practice (GRAP), 
issued by the Accounting Standards Board in accordance with Section 122(3) of the Municipal 
Finance Management Act (Act 56 of 2003) 

The "correction of errors in creditors" line item in the prior period (R 423 417) is not supported by 
any note disclosure or explanation. Furthermore, no supporting evidence has been provided to the 
auditors to substantiate the rationale of this adjustment. 

Internal control deficiency 

• The underlying records that were critical in the preparation of the financial statements were 
not fully assembled in a manner that was vital to ensure the construction of complete and 
accurate financial statements. 

• Senior management failed to exercise oversight responsibility regarding financial reporting 
and compliance. 

Recommendation 
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• Management must review and make the necessary adjustments to the annual financial 
statements. All adjustments made must be presented to the auditors together with 
substantiating evidence for testing and review purposes. 

• Detailed finance and GRAP compliance checklists should be performed on the annual 
financial statements prior to submission. 

Management response 

Agreed 

The financial statements will be prepared in house starting it on quarterly bases. 

Detailed finance and GRAP compliance checklists should be performed on the annual financial statements 
prior to submission. 

Name : B.H Bhengu 

Position : Acting Chief Finance Officer 

Date: 16 November 201 5 

Auditor’s conclusion 

Management response is noted and the amount of R423 417 will be taken to the schedule of overs 
and under. 


INFORMATION SYSTEM AUDIT 

1. INFORMATION TECHNOLOGY GENERAL CONTROLS REVIEW 

1.1 IT GOVERNANCE 

1.1.1 IT Governance Framework not comprehensively documented and has not been approved 
Audit finding 

An IT Governance Framework was documented however it was not yet approved and 
implemented. 

Additionally the following deficiencies were noted in the IT Governance Framework: 

• The following main objectives were not defined in the framework: 
o Strategic alignment 

o Value delivery 
o Resource management 
o Risk Management 
o Performance management 

• The following IT Process and control models were not defined in detail: 
o Political and strategic leadership 
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o Unambiguous accountability 

o Roles and responsibilities (GITO should preferably represent the ICT function on executive 
management level) 
o ICT resources 

o Capacity and capability to enable ICT service delivery 
o Organisational structures 

o Practices to avoid breakdown in internal control and oversight (IT-related policies, procedures 
and standards) 

o Stakeholders (internal and external) 

The non-implementation of an IT governance framework could result in accountability not 
being established and the breakdown in control and oversight over IT operations. 

Internal control deficiency 

Leadership: IT Governance 

No individual had been assigned the responsibility to develop and adequately document an 
IT Governance Framework. 

Recommendation 

Management should ensure the IT Governance Framework is updated, approved and 
implemented. The framework should supports the IT Strategy and serve as a guide for IT 
reporting, IT decisions, IT structures, IT governance processes, policies, standards and 
procedures. 

Management response 

Agreed. The IT Governance Framework will be amended as recommended. Policies, 
procedures, standards and the framework development will be outsourced to an external 
party to assist. Aspects and omissions as detailed above will be taken into consideration. 

Responsible official: N Xulu 

Position: Director - Corporate Services 

Action date: 30 June 2016 

Auditor’s conclusion 

• Management responses are noted and the corrective actions agreed upon by management 
will be assessed in the next audit cycle. 

1.1.2 IT Steering Committee not established 
Audit finding 
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There were no governance structures overseeing IT or an IT Steering Committee in place at the 
municipality. 

The non-establishment of an IT Steering Committee at the municipality could indicate that 
decisions on IT investments and priorities are not based on joint priorities. Those charged with 
governance might not be aware of the municipality’s IT related risks and value resulting in non- 
compliance with governance requirements which will negatively impact on their public 
accountability. 

Internal control deficiency 

Leadership: IT Governance 

Due to the many resignations and vacancies at the municipalities it was difficult to establish a 
committee. 

Recommendation 

Management should ensure an IT Steering Committee is established with all members formally 
appointed. Minutes of meetings should be prepared for all meetings held and the draft sent to all 
the committee members for review and comments before being finalised as per the terms of 
reference. 

Management response 

Agreed. The steering committee is in the process of being established, Terms of reference are in 
place and approved, however members have not been appointed. Members are in the process of 
being appointed.. 

Responsible official: S Sibisi 

Position: Acting Municipal Manager 

Action date: 30 November 2015 

Auditor’s conclusion 

• Management responses are noted and the corrective actions agreed upon by management will 
be assessed in the next audit cycle. 

1.1.3 No IT Risk register in place 


110 


Audit finding 

Although an enterprise wide risk register was in place it was noted that IT related risks were not 
included in this register. 

The lack of an IT Risk Register could result in the non-identification of IT events which may have 
a potential negative impact on the goals or operations of the municipality. 

Internal control deficiency 
Leadership: IT Governance 

Risk management processes that were carried out by the municipality omitted IT risks. 

Recommendation 

Management should consider implementing the following controls: 

• An IT Risk Management Framework that is aligned to the Enterprise Risk Management 
Framework at the municipality should be created and maintained. 

• The framework should document a common and agreed-upon level of IT risks, mitigation 
strategies and residual risks. 

• Any potential impact on the goals of the municipality caused by an unplanned event should 
be identified, analysed and assessed. 

• Risk mitigation strategies should be adopted to minimise residual risk to an accepted level. 

• The result of the assessment should be understandable to the stakeholders and expressed 
in financial terms, to enable stakeholders to align risk to an acceptable level of tolerance. 

Management response 

Agreed. An IT Risk Register will be developed, included in the enterprise wide risk register and 
continuously monitored with considerations of the above recommendations 

Responsible official: S Sibisi 

Position: Acting Municipal Manager 

Action date: 28 February 2016 

Auditor’s conclusion 

• Management responses are noted and the corrective actions agreed upon by management will 
be assessed in the next audit cycle. 

1.1.4 IT service provider performance not formally reviewed and reported on 
Previous audit finding 
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There were no formal processes in place to review and report on the performance of services 
rendered by vendors. 

Follow up audit finding 

The following was noted with regard to the management of IT service providers: 

• There were no formal processes in place to review and report on the performance of services 
rendered by vendors. 

• Performance measurements and frequency of reporting and monitoring were not defined on 
the Bytes and Payday service level agreements. 

• The Payday service level agreement obtained was outdated and had expired in June 2012. 

If regular monitoring of service levels received is not performed, management may not be aware 
of deviations from agreed service levels. This could result in excessive delays in the resolution of 
support incidents, downtime and a loss of productivity. Furthermore, the Municipality will not be in 
a position to determine if it is receiving value for its spend if service levels received is not 
monitored. 

Internal control deficiency 
Leadership: IT Governance 

Management had not implemented an adequate vendor management framework to ensure that 
all service providers are monitored and measured for service delivery standards. 

Recommendation 

Management should consistently monitor vendor performance through regular review of 
performance reports. Service provider performance review meetings should be held at scheduled 
times to ensure the achievement of agreed upon service levels. All service level agreements 
should be reviewed as part of this process. 

Management response 

Agreed. All service level agreements will be reviewed and updated to ensure compliance with the 
auditor’s recommendations. The review of supplier service performance will be driven by the IT 
Steering Committee once established. 

Responsible official: N Xulu and B Bhengu 

Position: Director - Corporate Services and Acting Chief Financial Officer 
Action date: 1 March 2016 

Auditor’s conclusion 

Management responses are noted and the corrective actions agreed upon by management will 
be assessed in the next audit cycle. 


1.2 IT SECURITY MANAGEMENT 

1.2.1 Internet and Security Policy does not contain sufficient information 
Audit finding 

Although the Internet and Security Policy was in place and approved by Council the following 
were not defined in the policy: 

• Actions to be taken due to a security incident, 

• Logging and review of system security, 

• Software authorisation & licensing (installation, purchasing of hardware & software etc.), 

• Remote access controls 

Without adequate IT security policies and procedures to guide users and administrators on the 
use and administration of the IT systems and equipment users may use the IT systems and 
equipment inappropriately. IT administrators will not have benchmarks and criteria against which 
to enforce compliance to ensure the appropriate use of the IT systems and facilities by users in a 
consistent manner in the municipality. 

Internal control deficiency 

• Financial and performance management: IT Systems 

Management were not aware of all controls that needed to be included in the Internet and 
Security Policy. 

Recommendation 

Management should ensure that the Internet and Security Policy is updated to include all missing 
information. The policy should thereafter be approved and circulated to all municipal employees. 
Regular reviews of policies for appropriateness should also be carried out. 

Management response 

Agreed. The Internet and Security Policy will be amended as recommended. Policies, 
procedures, standards and the framework development will be outsourced to an external party to 
assist. Aspects and omissions as detailed above will be taken into consideration. 


113 


Responsible official: N Xulu 
Position: Director - Corporate Services 
Action date: 30 June 2016 


Auditor’s conclusion 

• Management responses are noted and the corrective actions agreed upon by management will 
be assessed in the next audit cycle. 

1.2.2 No Patch Management Policy in place 
Previous audit finding 

A Patch Management Policy had not been formally documented and approved by the 
Municipality. 

Follow up audit finding 

A Patch Management Policy has not been documented, approved and implemented at the 
municipality. 

In the absence of a formal Patch Management Policy, patches may not be installed on 
servers and applications timeously thus resulting in system vulnerabilities which may be 
exploited. 

Internal control deficiency 

• Financial and performance management: IT Systems 

Resource limitations in the IT Department resulted in a Patch Management Policy not being 
developed. 

Recommendation 

A Patch Management Policy should be documented, approved and implemented. The policy 
should adequately document the process to be followed when patches are required to be 
installed. The policy should also include procedures regarding the approval of patches by 
management and should be distributed to all affected users. 

Management response 

Agreed, The Patch management Policy will be developed as recommended. Policies, 
procedures, standards and the framework development will be outsourced to an external 
party to assist. Aspects and omissions as detailed above will be taken into consideration. 
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Responsible official: N Xulu 
Position: Director - Corporate Services 
Action date: 30 June 2016 

Auditor’s conclusion 

• Management responses are noted and the corrective actions agreed upon by management 
will be assessed in the next audit cycle. 

1.2.3 Password policy inadequately documented and inadequate password settings 
configured on systems utilised (Venus, Payday and Conlog) 

Previous audit finding 

The following deficiencies were noted regarding the password settings documented in the 
internet and security policy: 

• The password configuration settings did not detail the standards to be applied for 
minimum password days, password complexity and password history 

• The IT Security Policy stipulated a password length of 6 characters; however a password 
length of 8 characters had been configured on the Windows Active Directory 

• The password settings for Conlog and Pastel/Sage Evolution could not be obtained to 
perform a comparison to those stipulated in the Internet and Security Policy. 

Follow up audit finding 

The following deficiencies related to password settings were noted: 

• The Internet and Security Policy did not stipulate required password settings to be 
configured on systems for minimum password days, password complexity and password 
history 

• There were no password settings configured on the Venus and Payday applications 

• The password settings for Conlog could not be obtained to perform a comparison to 
those stipulated in the Internet and Security Policy. 

• If password settings are not adequately detailed in documented policies and procedures, the risk 
of the network and applications being inappropriately compromised is increased. Inconsistent 
and weak password configuration settings may be enabled on IT systems. This could result in 
users being able to set easily guessable passwords and increases the risk of unauthorised 
individuals gaining access to the IT systems utilised by the municipality. 

Internal control deficiency 

• Financial and performance management: IT Systems 

A lack of capacity within the IT Department resulted in password configurations not being 
documented and adequately configured on systems. 
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Recommendation 


The Internet and Security Policy should be updated to include the standards to be complied 
with for minimum password days, password complexity and password history. Management 
should thereafter ensure that the policy standards stipulated in the Internet and Security 
Policy are consistently implemented on the network and applications. 

Management response 

Agreed. Management will ensure that the password configuration settings documented in the 
Internet and Security Policy are updated to be in accordance with leading practices. These 
will then be implemented across the network and all systems utilised by the municipality. 
Policies, procedures, standards and the framework development will be outsourced to an 
external party to assist. Aspects and omissions as detailed above will be taken into 
consideration. 

Responsible official: N Xulu 

Position: Director - Corporate Services 

Action date: 30 June 2016 

Auditor’s conclusion 

• Management responses are noted and the corrective actions agreed upon by management 
will be assessed in the next audit cycle. 

1.2.4 No user awareness training on IT security 
Audit finding 

No security awareness training, program or process had been established to promote IT 
security. 

If security awareness and best practices are not promoted throughout the municipality, 
security practices and processes will not be prioritised by employees, resulting in non- 
compliance with security requirements and or policies and best practice. 

Internal control deficiency 

• Financial and performance management: IT Systems 

Management was not aware of the need to establish a formal program to create IT security 
awareness. 

Recommendation 

Management should consider the inclusion of a security awareness element as part of the 
induction program provided for new employees. Regular workshops or security awareness 
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programs should be conducted for current staff in order to create a culture of security 
awareness amongst all employees. 

Management response 

Agreed. User awareness trainings on IT security policies will be done using workshops, 
inductions and internal trainings after IT policies have been implemented. 

Responsible official: N Xulu 

Position: Director - Corporate Services 

Action date: 30 June 2016 

Auditor’s conclusion 

• Management responses are noted and the corrective actions agreed upon by management 
will be assessed in the next audit cycle. 

1.2.5 System usernames not compliant to the approved user naming convention of the 
municipality (Venus and Payday) 

Audit finding 

We noted that the standard naming convention to be applied to usernames was supposed to 
be first initial and surname. Windows Active Directory usernames were compliant to this 
standard however Payday and Venus usernames were not compliant as they were first 
names only. 

Duplicate user accounts assigned to the same individual may be difficult to identify if a 
defined standard naming convention is not adequately complied with. It may also be difficult 
to establish the individual who is responsible for utilising a user account and administrators 
could make changes to an incorrect user profile if user accounts have not been named in a 
standard manner. 

Internal control deficiency 

• Financial and performance management: IT Systems 

The Internet and Security Policy was approved after usernames on the Venus and Payday 
applications had been established and therefore the required naming convention had not be 
applied to these applications. 

Recommendation 

Management should apply the naming convention on all applications utilised. On a regular 
basis a review should be conducted to ensure usernames conform to the approved standard 
naming convention. 
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Management response 

Agreed. All applications managed in-house, management will be ensured that going forward 
usernames follow the municipality’s approved standard naming convention. 

Responsible official: B Bhengu 

Position: Acting Chief Financial Officer 

Action date: 30 January 2016 

Auditor’s conclusion 

• Management responses are noted and the corrective actions agreed upon by management 
will be assessed in the next audit cycle. 

1.2.6 Formal reviews and monitoring of logon violations not performed (Windows Active 
Directory, Venus, Pastel and Payday) 

Audit finding 

No evidence that IT security violations or failed access attempts are monitored or reviewed 
on a regular basis was provided. 

• If logon violations are not actively reviewed and monitored the municipality may not be able 
to timeously identify and follow up on unauthorised attempts to access the network and IT 
systems. 

Internal control deficiency 

• Financial and performance management: IT Systems 
A lack of capacity resulted in the required reviews not being performed. 

Recommendation 

• Security and logon violation reports should be drawn and reviewed on a periodic basis. 
Evidence of reviews and the subsequent actions taken must be maintained for record 
purposes. 

Management response 

Agreed, logon violations will be monitored regularly going forward. 

Name and surname: S Buthelezi 
Position: IT Technician 
Implementation date: 30 March 2016 

Auditor’s conclusion 

• Management responses are noted and the corrective actions agreed upon by management 
will be assessed in the next audit cycle. 


1.3 USER ACCESS CONTROL 
1.3.1 User Access and Administration Procedure not approved 
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Previous audit finding 

The Municipality had not developed and approved a User Account Management Policy. 

Follow up audit finding 

A User Access and Administration Procedure had been developed but the procedure had not yet 
been approved. 

Employees may not be aware of the processes to be followed and the approvals required for new 
user access, modification of access, termination of access and password resets on Municipal 
systems. This may result in unauthorised users gaining access to the systems in use. 

Internal control deficiency 

• Financial and performance management: IT Systems 

The procedure was recently developed and there was not enough time prior to the audit to have 
the procedure approved. 

Recommendation 

Management should ensure that the User Account Management Policy is approved and 
implemented to manage user account maintenance. All employees should be made aware of the 
policy and be required to adhere to its contents. 

Management response 

Agreed. The User Account Management Policy will be sent for approval in the council. Policies, 
Procedures, standards and framework development will be outsourced to an external party to 
assist and review. 

Responsible official: N Xulu 

Position: Director - Corporate Services 

Action date: 30 June 2016 

Auditor’s conclusion 

• Management responses are noted and the corrective actions agreed upon by management will 
be assessed in the next audit cycle. 

1.3.2 No documentation completed for administrator access rights granted (Windows 
Active Directory) 

Previous audit finding 
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Administrator rights to the domain were granted to S Buthelezi (IT Technician) and Sfiso 
Maphumulo (Bytes Desktop Engineer) without formal documentation and approval taking 
place. 


Follow up audit finding 

Thabani P Masondo (IT Technician - Bytes) had been granted administrative rights on the 
Windows Active Directory Domain without proper documentation being completed and 
approved. We also noted that the “reception” user account had administrator access 
assigned on the Windows Active Directory domain controller. 

Users with administrator access have full control over systems. Unauthorised administrator 
rights granted to employees could result in unauthorised system changes which may affect 
the functionality of the system. 

Internal control deficiency 

• Financial and performance management: IT Systems 

Management had not implemented a formal procedure for the granting of administrator 
access rights. 

Recommendation 

Management should consider implementing the following controls: 

• Procedures for the granting and approval of administrator access rights should be 
included in the User Account Management Policy. 

• Unauthorised user accounts should be removed from the admin user list. 

• Administrator access should be requested through formal administrator access request 
forms which should be reviewed and approved by a senior official of the Municipality 

Management response 

Going forward forms will be timeously completed for all accesses assigned to user 
administrators and the reception user account will be removed from the list admin accounts. 

Responsible official: S Buthelezi 

Position: IT Technician 

Action date: Immediately 

Auditor’s conclusion 
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• Management responses are noted and the corrective actions agreed upon by management 
will be assessed in the next audit cycle. 

1.3.3 Register for the allocation of Microsoft licenses not completed 
Previous audit finding 

There is no volume based licencing agreement with Microsoft for the Windows operating 
system. Currently, licences are purchased on an ad hoc basis whenever a new terminal is 
acquired. Licences purchased were previously allocated to a terminal by completing a 
register; however this register is no longer maintained. 

Follow up audit finding 

A software licence register is not maintained and Microsoft volume based licences had not 
yet been procured. 

This could result in inadequately licensed terminals being utilised by the municipality and 
licenses not required being purchased. The municipality may be liable for licencing fines and 
be at risk of reputational damage if software in use is not appropriately licensed. 

Internal control deficiency 

• Financial and performance management: IT Systems 

Delays in the supply chain management process had resulted in volume licenses not being 
purchased. 

Recommendation 

Management should consider implementing the following controls: 

• A volume based licensing agreement should be entered into with Microsoft 

• If this is not financially viable, then a list of licenses together with the serial number of the 
devices they are linked to should be maintained by the municipality 

Management response 

Agreed. The IT Department are in the process of obtaining a volume based licence 

Responsible official: N Xulu 

Position: Director - Corporate Services 

Action date: 30 October 201 5 

Auditor’s conclusion 

• Management responses are noted and the corrective actions agreed upon by management 
will be assessed in the next audit cycle. 

1.3.4 User access rights not periodically reviewed (Payday, Pastel, Venus and Conlog) 
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Previous audit finding 

The following weaknesses were noted with regard to the review of user access rights 
assigned on systems: 

• Periodic reviews were not performed on the Conlog system to ensure that current user 
access rights and privileges assigned on the system were still commensurate with an 
employee’s job responsibilities 

• Evidence related to the user access reviews performed for the Venus, Payday and 
systems was not maintained 

Follow up audit finding 

No user access reviews were performed for the period under review . 

If reviews of users' access rights are not performed on a periodic basis, management may 
not be able to identify users who have been granted excessive access rights or access rights 
no longer required to perform the roles and responsibilities associated with their job 
functions. This could compromise the confidentiality, integrity and availability of data stored 
on the system. In addition, if adequate evidence of reviews performed is not maintained, 
management may have no audit trail for changes made to user’s accounts as a result of user 
access reviews performed. 

Internal control deficiency 

• Financial and performance management: IT Systems 

A lack of capacity resulted in the required reviews not being performed. 

Recommendation 

Management should consider implementing the following controls: 

• Periodic checks should be carried out by management to ensure that the uses current 
access rights assigned on systems are still commensurate with their job responsibilities 

• Evidence of such reviews should be maintained 

Management response 

Agreed. Review of user access rights will be performed on a quarterly basis and evidence of 
reviews will be maintained. 

Responsible official: B Bhengu 

Position: Acting CHIEF FINANCIAL OFFICER 

Action date: 30 January 2016 
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Auditor’s conclusion 


• Management responses are noted and the corrective actions agreed upon by management 
will be assessed in the next audit cycle. 

1.3.5 User access forms not completed (Pastel and Payday) 

Audit finding 

It was noted that users were added on the Pastel and Payday systems using e-mails or 
telephone confirmation and as a result the following users were added on the respective 
systems without user authorisation forms being completed: 

Pastel 


User 

Date added 

Samkelisiwe Ngobese 

07/09/2015 


Payday 


User 

Date added 

Mpume Temp 

15/01/2015 

Lindani Khanyile 

12/08/2015 

Mzi Ndlela 

09/06/2015 

Samkelisiwe Ngobese 

07/09/2015 


This may result in user access management activities being performed without valid and 
approved requests. In addition, unauthorised, conflicting and excessive access may be 
granted to users if system accesses to be assigned are not formally approved by municipal 
management. 

Internal control deficiency 

• Financial and performance management: IT Systems 
A lack of management oversight to ensure IT controls are adequately adhered to. 

Recommendation 

Management should ensure that User Access Request Forms are adequately and 
consistently completed and authorised prior to any user access management activity being 
performed. 

Management response 
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Agreed. All new users added on the financial systems going forward will requested to fill in 
new user forms and proper approval will be obtained. 

Responsible official: B Bhengu 

Position: Acting Chief Financial Officer 

Action date: 30 November 201 5 

Auditor’s conclusion 

• Management responses are noted and the corrective actions agreed upon by management 
will be assessed in the next audit cycle. 

1.3.6 Terminated employees user accounts not disabled (Venus, Pastel and Payday) 

Audit finding 

We noted that the following user’s employment was terminated however their user accounts 
were still active on the respective systems: 


Payday 



Mbali Thabethe 

Payroll Officer 

01/11/2014 

Philani Sibiya, (August 2015) 

Chief Financial Officer 

31/07/2015 

Venus 



Thobani Mathe 

Intern: Finance 

01/11/2014 

Philani Sibiya 

Chief Financial Officer 

31/07/2015 

Nosisa Khumalo 

Accountant -Income 

27/02/2014 

Mbali Thabethe 

Payroll Officer 

31/01/2014 

Pastel 



Philani Sibiya 

Chief Financial Officer 

31/07/2015 


• This may result in employees having access to the municipality’s IT systems even though 
their services had been terminated. Individuals may compromise this user account to gain 
unauthorised access which could lead to the confidentiality, availability and integrity of data 
stored on these systems being affected. 

Internal control deficiency 

• Financial and performance management: IT Systems 


124 


1.23 Human resource and user supervisors do no alert system administrators and IT personnel when users 

ARE NO LONGER EMPLOYED AT THE MUNICIPALITY. 

Recommendation 

• The identified user accounts should be disabled immediately. Furthermore, management 
should ensure that processes are established to remove terminated employee’s network and 
system accesses in a timely manner. 

Management response 

Agreed. All users noted will be removed 
Responsible official: B Bhengu 
Position: Acting Chief Financial Officer 
Action date: 30 October 201 5 

Auditor’s conclusion 

• Management responses are noted and the corrective actions agreed upon by management 
will be assessed in the next audit cycle. 

1.3.7 System administrator activities not reviewed (Windows Active Directory, Venus, Pastel 
and Payday) 

Previous audit finding 

Independent reviews of System Administrator activities on the Windows Active Directory, 
Venus and Payday systems were not performed. 

Follow up audit finding 

No system administrator reviews were performed for the period under review. 

Users with administrator access have full control over systems. Not reviewing activities 
performed by administrators may result in unauthorised activities not being timely detected. 
Furthermore, this could result in user id maintenance activities being performed without valid 
and approved requests. 

Internal control deficiency 

• Financial and performance management: IT Systems 

Due to resource limitations in the IT Department reviews required were not performed. 

Recommendation 

Management should ensure that activities of system administrators are reviewed by 
independent personnel. Documentation relating to this review should be maintained as 
evidence of reviews performed. 
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Management response 

Agreed, all administrator activities will be reviewed 
Responsible official: B Bhengu 
Position: Acting Chief Financial Officer 
Action date: 30 January 2016 

Auditor’s conclusion 

• Management responses are noted and the corrective actions agreed upon by management 
will be assessed in the next audit cycle. 

1.3.8 Service provider responsible for administration of Human Resource and Payroll 
system (Payday) 

Previous audit finding 

Cognisance was taken of the fact that that an employee at the municipality had been 
assigned administrator access on the Payday system. It was however noted that reliance 
was being placed on the service provider to administer the system as the employee had not 
been trained on the administrator functionality available on the Payday system. 

Follow up audit finding 

The Payday service provider was solely responsible for the administration of the system 
even though there was an individual in-house with administration access rights assigned. 

Complete dependence on a service provider for administration of a financial system could 
result in unauthorised transactions and activities being performed on the system. In addition, 
prolonged system downtime may occur should the service provider not be available. 

Internal control deficiency 

• Financial and performance management: IT Systems 

Management had not ensured that the service provider transferred system administration 
knowledge to an employee of the municipality. 


Recommendation 

Management should ensure that the service provider transfers system administrator 
knowledge to the employee who has been assigned administrator access on the Payday 
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system. Thereafter, the municipality should assume the responsibility for administering the 
Payday system. 

Management response 

Agreed. The administrator activities will be closely monitored and as soon as the in-house 
administrator is able to fully handle the administrative functions the Payday consultant 
administrator functions will be revoked 

Responsible official: B Bhengu 

Position: Acting Chief Financial Officer 

Action date: 30 March 2016 

Auditor’s conclusion 

• Management responses are noted and the corrective actions agreed upon by management 
will be assessed in the next audit cycle. 

1.4 INFORMATION TECHNOLOGY SERVICE CONTINUITY 

1.4.1 Business Continuity Plan not established and Disaster Recovery Plan not tested 
Previous audit finding 

The following weaknesses were identified with regard to IT service continuity controls: 

• A Business Continuity Plan (BCP) had not been established 

• A Disaster Recovery Plan (DRP) had been established however the plan had not been 
tested. 

Follow up audit finding 

The BCP was not formally documented and the DRP had not been tested. Additionally the 
following was noted not being defined in the DRP: 

• Disaster notification and plan activation; 

• System and business unit recovery procedure; 

• Primary site procedure; 

• Re-establishment of normal operations; 

• Post recovery review; 

• Plan maintenance and testing; 

• Training and awareness of users and information services function staff; 

• A contingency processing alternative exists for each major data centre and is capable of 
replacing the primary site at short notice; 
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• DRP did not make reference to any security requirements which should be maintained in an 
occurrence of a disaster; 

• The need to meet statutory and regulatory requirements during a disaster has not been 
considered and addressed; and 

• No hard copy was kept offsite 

In the event of a disaster the municipality may not be able to recover to normal business 
operations timeously if a comprehensive, current and tested BCP and DRP are not in place. 

Internal control deficiency 

• Financial and performance management: IT Systems 

Management did not prioritise establishing a BCP and the drafting and testing of the DRP. 

Recommendation 

Management should consider implementing the following controls: 

• A BCP should be developed, implemented and communicated to all affected employees. 

• The DRP should be updated to ensure omissions noted on the DRP are defined, reviewed 
and implemented as part of the DRP process. 

• Steps should be taken to ensure that the BCP and DRP are tested on an annual basis. 

• The results of the testing should be evaluated and benchmarked against required criteria 
in order assess the effectiveness of the plans. 

• Changes to the BCP and DRP should be made based on the results of testing performed 
with the amended plans being approved and distributed to the relevant individuals. 

Management response 

Agreed. The various BCP and DRP options available to the municipality will be evaluated 
and a suitable solution selected to drive the process of designing and implementing the BCP 
as well as ensuring that the BCP and DRP are adequately tested. The BCP will be driven 
from the Municipal Manager’s office. The DRP will be amended as recommended. Policies, 
procedures, standards and framework development will be outsourced to an external party to 
assist. Aspect or omissions above will be taken into considerations. 

Responsible official: N Xulu 

Position: Director - Corporate Services 

Action date: 30 June2016 

Auditor’s conclusion 
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• Management responses are noted and the corrective actions agreed upon by management 
will be assessed in the next audit cycle. 

1.4.2 Deficiencies noted with regard to backup processes currently performed 
Previous Audit finding 

The following deficiencies were noted with regard to backups performed: 

• The Backup Policy did not detail the process for tape movement (secure transportation from 
onsite to offsite) 

• The backup register did not identify the status of backups performed 

• An offsite backup register was not maintained. 

Follow audit finding 

The following deficiencies were noted with the backup process currently performed by the 
municipality: 

• The Backup Policy did not address the following processes: 

o What data, systems and application software should be backed up 
o Backup schedules which should include monthly, weekly and daily dates and times 
o Retention periods which should include the monthly, weekly and daily backup retention 
periods 

o Backup reports and registers 
o Monitoring and review of backups 
o Process handling of unsuccessful backups 
o Off-site backup arrangements 
o Testing of backups 

• Additionally the software (backup exec) used to backup data only kept logs for 3 months (two 
months before plus the current month). The completeness of backups could therefore not be 
determined. 

• Windows Active Directory and Payday backup tapes were not taken offsite, 

• The backup register did not identify the status of backups performed. 

• Backup tapes were are only maintained for a week and the Windows Active Directory and 
Payday backups were only done 3 days a week. 

• No restoration testing was performed for backups in the financial year under review. 

Employees who are required to perform backups may not be aware of the correct 
procedures to be followed for tape movement. If backups are not adequately monitored, 
backups may be incomplete or unsuccessful and management may not be able to use the 
backup to restore data. 
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Failure to store backups in an off-site location can result in the municipality being unable to 
recover its data in the event that data files at the primary site are unavailable or destroyed. If 
restoration testing is not performed on a periodic basis management may not be aware of the 
continued readability of backup media. In addition, if backup media is not readable the 
Municipality may not be able to utilise its backups to restore data. In the absence of evidence 
of the restoration tests performed, management may not be aware of the readability of 
backup media as well as the actions taken for backups that could not be restored. 

Internal control deficiency 

• Financial and performance management: IT Systems 

The Backup Policy and maintenance of backup registers was not adequately implemented 
due to resource limitations within the IT department and also systems limitations with the 
software used. 

Recommendation 

Management should consider implementing the following controls: 

• Management should ensure that backup standards and procedures are enhanced to 
include the process for transportation of backup media, and omissions noted above on 
the back up policy. 

• Backup registers must be amended to include the status, type of backup and completion 
of backups performed. 

• Management should amend the configuration of the backup exec to keep data for full 
financial year and not 90 days. 

• Windows Active Directory and Payday backup tapes should be taken offsite together with 
Venus backup tapes. 

• Incremental backups should be performed daily for Windows Active Directory and 
Payday. Full backups should be performed on a weekly basis. Backup tapes must be 
taken offsite everyday 

• Restoration testing of backup media should be conducted on a scheduled basis and 
evidence of the testing performed should be maintained. 

Management response 

Agreed. The Back-up policy will be amended as per recommended. Policies, procedures, 
standards and framework development will be outsourced to an external party to assist. 
Aspects or omissions will be taken into considerations. Backups and restoration testing will 
be performed by the service provider and the municipality will ensure that evidence of the 
tested is requested and maintained. 
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Responsible official: N Xulu and S Buthelezi 
Position: Director - Corporate Services and IT Technician 
Action date: 30 June2016 

Auditor’s conclusion 

• Management responses are noted and the corrective actions agreed upon by management 
will be assessed in the next audit cycle. 

1.5 PROGRAM CHANGE MANAGEMENT 

1.5.1 Emergency change procedures not documented 

Audit finding 

Cognisance was taken of the fact that a Change Management Policy had been developed by the 
municipality. It was however noted that procedures to be followed for emergency changes were 
not detailed in the policy. 

An inadequate control process for emergency changes may lead to untested and unauthorised 
changes being made to the production environment which could affect the stability and accuracy 
of applications. 

Internal control deficiency 

• Financial and performance management: IT Systems 

Management oversight was noted with regard to designing and including emergency 
change procedures in the Municipality’s Change Management Policy. 

Recommendation 

Emergency change management procedures should be comprehensively documented and 
incorporated into the current Change Management Policy. The updated policy should be 
approved by Council and communicated to affected users. 

Management response 

Agreed. Emergency Change Management procedures will be incorporated into the Change 
Management Policy. Policies, procedures, standards and framework development will be 
outsourced to an external party to assist. Aspects or omissions will be taken into considerations 

Responsible official: N Xulu 

Position: Director - Corporate Services 

Action date: 30 June 2016 

Auditor’s conclusion 
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• Management responses are noted and the corrective actions agreed upon by management will 
be assessed in the next audit cycle. 

1.5.2 System change logs not available (Venus, Payday, and Conlog) 

Previous audit finding 

The municipality was unable to extract system generated logs to substantiate if any changes had 
been implemented on key financial systems for the period under review. 

Follow up audit finding 

Change logs could not be generated from the Venus, Payday and Conlog systems. 

Additionally, there were updates performed on Payday (4.7a) and Venus (20.1) for the period 
under review however no change control process was followed for these updates. 

Inadequate change control processes may lead to untested and unauthorised changes being 
implemented in the production environment. This may affect the stability of the applications and 
accuracy of calculations performed. 

Internal control deficiency 

• Financial and performance management: IT Systems 

Management do not know how to extract change control logs due to the significant dependency 
on vendors and the slow speed of the software. 

Recommendation 

Management should consider implementing the following controls: 

• All changes or updates performed on the systems should follow a change control process. 

• Staff should be trained on how to extract change logs from systems. 

• System generated change logs should be reviewed on a periodic basis to ensure that no 
unauthorised changes have been made to applications. Evidence of these reviews performed 
should be maintained. 

Management response 

Agreed. Service providers will be requested to assist with the generation of system change logs. 
These will thereafter be reviewed by the municipality. 

Responsible official: N Xulu 

Position: Director- Corporate Services 

Action date: 30 November 2015 

Auditor’s conclusion 
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• Management responses are noted and the corrective actions agreed upon by management will 
be assessed in the next audit cycle. 

1.6 FACILITIES AND ENVIRONMENTAL CONTROLS 

1.6.1 No server room maintenance schedule in place 

Previous audit finding 

A maintenance schedule for devices inside the server room had not been developed. 
Maintenance was carried out on an ad hoc basis and there was no formal process to ensure that 
all IT environmental controls within the server room were periodically serviced. 

Follow up audit finding 

A maintenance schedule for devices inside the server room had not been developed. As a result 
it was noted that the UPS and generator had not been serviced for the period under review. 

Lack of a maintenance schedule may result in environmental controls not being periodically 
serviced which could result in IT systems malfunctioning thereby interrupting business 
operations. 

Internal control deficiency 

• Financial and performance management: IT Systems 

A maintenance schedule was not developed as the maintenance department needed to be 
consulted. 


Recommendation 

Management should ensure that the maintenance schedule is established and server room 
environmental controls are regularly serviced to ensure continuous functioning of systems and 
business operations. 

Management response 

Agreed. A maintenance schedule will be developed and implemented in consultation with the 
maintenance department. 

Responsible official: S Buthelezi 

Position: IT Technician 

Action date: 30 June 2016 

Auditor’s conclusion 
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Management responses are noted and the corrective actions agreed upon by management will 
be assessed in the next audit cycle. 


2. BASIC FIREWALL REVIEW 
2.1 No Firewall Policy in place 

Audit finding 

A Firewall Policy had not been documented. 

The lack of a Firewall Policy may result in the firewall not being properly configured and 
maintained as the required settings as per the policy may not be able to be configured on the 
firewall installed by the municipality. This could result in the firewall not working as intended and 
the municipality being exposed to security threats. 

Internal control deficiency 

Financial and performance management: IT Systems 

A lack of capacity and insufficient firewall knowledge within the municipality resulted in a firewall 
policy not being developed. 

Recommendation 

Management should ensure the firewall policy is developed, approved and implemented. The 
following must be addressed in the policy: 

• Identification and authentication 

• Authorisation and access control 

• System Integrity and recovery 

• Secure Communication 

• Auditability 

• Change Control 

• Configuration 

• Monitor Stability 

• Enforcement 

• Consequences of noncompliance. 

Management response 

Agreed. The Firewall policy will be developed as recommended. Policies, procedures, standards 
and framework development will be outsourced to an external party. Aspects or omissions above 
will be taken into consideration. 


Responsible official: N Xulu 
Position: Director - Corporate Services 
Action date: 30 June2016 

Auditor’s conclusion 

• Management responses are noted and the corrective actions agreed upon by management will 
be assessed in the next audit cycle. 

2.2 Inadequate commenting on firewall rules 
Audit finding 

We noted that Cisco firewall rules Access Control Lists (ACLs) were not adequately commented 
on to include the full name of the rule and a brief description associated with each rule. 

In the current state, when reviewing ACL’s existing on the firewall it is difficult to determine the 
reason behind the implementation of the firewall rules as well as the expiry date associated with 
each rule. Unclear or unknown rules may end up not being adequately maintained leaving the 
firewall susceptible to compromise. 

Internal control deficiency 

• Financial and performance management: IT Systems 

No firewall policy to guide employees on required rules commenting. 


Recommendation 

All ACL’s should be commented and contain at least the rule name, a brief description of the rule, 
the date the rule was implemented, as well as (where applicable) the change control number 
associated with the request. 

Management response 

Agreed. Management will review the present configuration and make the necessary comments 
against each rule that can be identified as recommended. 

Responsible official: S Buthelezi 

Position: IT Technician 

Action date: 30 March 2016 

Auditor’s conclusion 

• Management responses are noted and the corrective actions agreed upon by management will 
be assessed in the next audit cycle. 
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2.3 Outdated firewall software version 


Audit finding 

We noted that the firewall was running an outdated Cisco software version of ASA 8.2(5), ASDM 
6.4(5). 

If the firewall is not regularly maintained with the latest updates an attacker may exploit known 
software vulnerabilities. In addition to security features and fixes, software updates will often 
include additional functionality, performance improvements and features. 

Internal control deficiency 

• Financial and performance management: IT Systems 

A process was not developed ensure firewall software versions were timeously installed. 

Recommendation 

Management should upgrade the current version of firewall software used with to the latest 
version ASA 9.5(1 .200)/ASDM 7.5(1 ) 

Management response 

Agreed. The updating of the firewall software will be undertaken as recommended. 

Responsible official: S Buthelezi 
Position: IT Technician 
Action date: 30 March 2016 

Auditor’s conclusion 

• Management responses are noted and the corrective actions agreed upon by management will 
be assessed in the next audit cycle. 

2.4 No review of firewall logs and configurations 
Audit finding 

• Firewall configuration settings had not been formally reviewed. 

Security and or access violations may not be detected in a timely manner resulting in data 
integrity, availability and confidentiality being compromised. If firewall configurations are not 
regularly reviewed inconsistencies and weaknesses will not be timely detected and resolved. 

Internal control deficiency 

• Financial and performance management: IT Systems 

A lack of capacity resulted in periodic reviews of security logs and configurations. 

Recommendation 
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Management should ensure that security logs are periodically reviewed and that the firewall is 
configured to send logs to a remote server/location. A solution that proactively parses the security 
logs for defined events should be considered in order to make available useful information with 
minimal effort to security staff. Furthermore firewall configurations should be reviewed periodically 
to ensure that they remain aligned with the firewall configurations agreed on when the firewall 
was installed. 

Management response 

Agreed, review of firewall logs and configurations will be performed on an adhoc basis. 
Responsible official: S Buthelezi 
Position: IT Technician 
Action date: 30 March 2016 

Auditor’s conclusion 

Management responses are noted and the corrective actions agreed upon by management will 
be assessed in the next audit cycle. 


2.5 Insecure network services 
Audit finding 

We noted that remote administration of the firewall using Secure Shell (SSH) was not restricted to 
individual remote management IP addresses and trusted hosts. 

The insecure services identified are vulnerable to exploitation due to the lack of security 
employed in their design. Information could be intercepted while in transit compromising the 
confidentiality, integrity and availability of the information. If an attacker was able to determine the 
authentication credentials for the firewall, they may be able to gain access from any host. 
Additionally, if a vulnerability were to exist in the remote services e.g. SSH, an attacker may be 
able to gain access to the device due to the weak remote access restrictions 

Internal control deficiency 

Financial and performance management: IT Systems 

The lack of a Firewall Policy resulted in the firewall being incorrectly configured. 

Recommendation 

We recommend that the network service currently enabled should be reviewed for 
appropriateness. Insecure services should be disabled or substituted with more secure 
alternatives, and the reasons for active services need to be documented. Furthermore, 


management should ensure that remote administrative access using SSH is restricted to specific 
management IP addresses/hosts. The firewall security standard should incorporate restriction of 
remote administration hosts. 

Management response 

Agreed. All of the network services and remote administration access will be reviewed and 
updated in terms of the recommended changes. 

Responsible official: S Buthelezi 

Position: IT Technician 

Action date: 30 March 2016 

Auditor’s conclusion 

• Management responses are noted and the corrective actions agreed upon by management will 
be assessed in the next audit cycle. 

3. ELECTRONIC FUNDS TRANSFER REVIEW 

3.1 Deficiencies noted on the electronic funds transfer processes performed 

Audit finding 

There was a no documented electronic funds transfer (EFT) payment policy that served as a 
guideline for all creditors and employee salaries EFT payments. 

In addition the following deficiencies were identified with the current EFT processes performed: 

• Banking details of suppliers were changed on the online banking system without any formally 
approved document from the municipality. 

• Two terminated users (Philani Sibiya (Chief Financial Officer) and Mbalenhie Thabethe 
(Payroll Officer)) and one suspended employee (Sithembiso Mthembu (Municipal Manager)) 
still had active accounts on the ABSA integrator banking system. 

• There were no reviews of EFT activity logs performed. 

In the absence of a formally documented EFT Payment Policy staff may not be aware of the 
process to be followed when EFT payments are required to be made. This could result in 
unauthorised EFT payments being successfully processed. User accounts of terminated 
employees may be used to perpetrate fraud if they are not timely removed from the system. 
Fraudulent activities may also not be detected if payment logs are not regularly reviewed. 
Internal control deficiency 

• Financial and performance management: IT Systems 
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A lack of capacity resulted in the required EFT controls not being implemented. 

Recommendation 




• Management should ensure a documented EFT payment policy that outlines user management, 
master data amendments, creditors and salary payments is developed, approved and 
implemented. Changing of supplier and employees details should be accompanied by an 
approved internal change form. Management should ensure that user accounts of terminated 
employees are removed from the system. Management is also advised to formulate a process 
that will ensure EFT payments are independently reviewed on a regular basis to ensure all 
payments are supported by source documents and all relevant documents. 

Management response 

Agreed. Management will action as recommended. An EFT policy will be developed and 
approved. A formal change form will also be created and used for all changes performed on 
suppliers and employees data. All terminated and suspended user accounts will be deactivated. 
Responsible official: B Bhengu 

Position: Acting Chief Financial Officer 

Action date: 30 January 2016 

Auditor’s conclusion 

• Management responses are noted and the corrective actions agreed upon by management will 
be assessed in the next audit cycle. 
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ANNEXURE C: ADMINISTRATIVE MATTERS 
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FINANCIAL VIABILITYREPORTING 


ANNEXURE D: FINANCIAL VIABILITY CALCULATIONS 

The calculations on which the financial viability analyses and discussion in PART D - FINANCIAL 
VIABILITY under SECTION 3: SPECIFIC FOCUS AREAS are based, are set out below. 

These annexures are excel embedded - double click anywhere on the worksheet to edit the 
excel document 


EXPENDITURE MANAGEMENT 


Ref 


Financial 

statement 

amounts 





R'OOO 

Accounts payable from goods and services purchased on credit 




14 222 939 

Total purchases from goods and services purchased on credit for 
the year 




44 406 228 











Creditor-payment period 

(Accounts payable -s- Total purchases x 365) 


1.1 













REVENUE MANAGEMENT 


Ref 


Financial 

statement 

amounts 





R'OOO 

Accounts receivable from goods and services rendered on credit 
(after impairment) 




11 888 101 

Debtors impairment provision at year-end (In respect of accounts 
receivable from goods and services rendered on credit) 




10 195 555 

Total revenue from goods and services rendered on credit for the 
year 




21 973 903 











Debtor-collection period - after impairment 

(Accounts receivable [after impairment] -s- Total revenue x 365) 


2.1 













Debtors impairment provision at year-end as a percentage of 
accounts receivable from goods and services rendered on 
credit 


2.2 

























































































Adjustments for 
material 
uncorrected 
misstatements 
R'OOO 


0 


0 


Financial 
statement 
amounts after 
adjustments for 
material 
uncorrected 
misstatements 
R'OOO 


14 222 939 


44 406 228 


Days 


Adjustments for 
material 
uncorrected 
misstatements 
R'OOO 


Financial 
statement 
amounts after 
adjustments for 
material 
R'OOO 


11 888 101 


10 195 555 


21 973 903 


Days 
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ASSET AND LIABILITY MANAGEMENT 


Ref 


Financial statement 

amounts 


Adjustments for 
material uncorrected 

m i sstate m e nts 


Financial statement 

amounts after 
adjustments for 
material uncorrected 

misstatements 





R'OOO 


R'OOO 


R'OOO 

Total revenue for the year 




129 760 365 




129 760 365 

Less: Total expenditure for the year 



101 032 018 




101 032 018 

Surplus / (deficit) for the year 

3.1 


28 728 347 


0 


28 728 347 










Total current assets 




20 938 858 




20 938 858 

Less: Total current liabilities 




22 065 165 




22 065 165 

Net current assets / (liabilities) 




-1 126 307 


0 


-1 126 307 









Total non-current assets 



285 643 208 




285 643 208 

Less: Total non-current liabilities 

Net non-current assets / (liabilities) 




4 636 849 




4 636 849 



281 006 359 


0 


281 006 359 










Total assets 




306 582 066 


0 


306 582 066 

Less; Total liabilities 




26 702 014 


0 


26 702 014 

Net assets / (liabilities) 




279 880 052 


0 


279 880 052 









Inventory 




0 


0 


0| 










Year-end carrying amount of the category(ies) of PPE that were subject 
to impairment 




94 259 775 




94 259 775 

Plus: Year-end carrying amount of the category(ies) Intangible assets 
that were subject to impairment 




920 584 




920 584 




95 180 359 


0 


95 180 359 









PPE impairment provision at year-end 



0 




0 

Plus: Intangible assets impairment provision at year-end 



0 




0 




0 


0 


0 








Year-end carrying amount of PPE 




279 058 629 




279 058 629 

Plus: Year-end carrying amount of investment property 




5 663 995 




5 663 995 





284 722 624 


0 


284 722 624 









Year-end carrying amount of investments, if subject to impairment 



0 




0 

Plus: Year-end carrying amount of loan receivables (loans awarded), if 
subject to impairment 




0 




0 




0 


0 


0 










ln\«stments impairment provision at year-end 




0 




0 

Plus: Loan receivables (loans awarded) impairment provision at year-end 



0 




0 



0 


0 


0 



























% 

Current ratio 

(Total current assets Total current liabilities x 100) 


3.2 






94.9% 

Acid test ratio 

([Total current assets - Inventory] + Total current liabilities x 100) 


. 






94.9% 

Total debt to total assets ratio 

(Total liabilities Total assets x 100) 


3.3 






8.7% 

PPE and intangible assets impairment provisions at year-end as a 
percentage of the carrying amount of the category(ies) of PPE and 
intangible assets subject to impairment 


3.4 






0.0% 

Loan receivables (loans awarded) and investments impairment 
provisions at year-end as a percentage of the carrying amount of 
investments and loans subject to impairment 


3.5 

























CASH MANAGEMENT 


Ref 


Financial statement 

amounts 


Adjustments for 
material uncorrected 

m i sstate m e nts 


Financial statement 

amounts after 
adjustments for 
material uncorrected 

misstatements 





R'OOO 


R'OOO 


R'OOO 

Cash and cash equivalents / (bank overdraft) at year-end 

Note: Bank overdraft must be captured as a negative 


4.1 


9 050 757 




9 050 757 

Net cash flows for the year from operating activities 

Note: Negative cash flows must be captured as a negative 


4.2 


48 169 750 




48 169 750 

















% 

Creditors as a percentage of cash and cash equivalents 


4.3 






157.1% 

Current liabilities as a perc+C91entage of net cash inflows for the 
year from operating activities 


4.4 






45.8% 
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APPENDIX C 

2014/2015 REMEDIAL ACTION PLAN ON ISSUES RAISED BY 

AUDITOR GENERAL 
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NKANDLA LOCAL MUNI Cl PALI TY AUDI TOR GENERAL ACTI ON PLAN 2014/ 2015 


NO 

FI NDI NG BY 
AUDITOR 

GENERAL 

EXPECTED ACTIONS 
TO REMEDY 

TARGET 
DATE FOR 
COMPLETI 
ON 

PROGRESS TO 
DATE 

PORTFOLIO OF 
EVI DENCE / 

STATUS AS AT 
04 J anuary 
2016 

RESPONSI B 
LE 

OFFICIAL 

1. 

Acting position 
occupi^ for more 
than 3 months 

The period of Acting 
exceeded the 

maximum 6 months 
permitted under the 
iegisiation. 

There is no evidence to 
indicate that the 

extension of the 
appointment period was 
appropriateiy authorised 
by the MEC. 

The Municipaiity to 
ensure that aii 
section 54/56 
extended acting are 
approved by MEC 

On going 

Resoiution and 
ietter with 

recommendatio 

ns submitted to 

MEC 

• Counci i 

Resoiution 

• Letter to MEC 

• MEC ietter of 
Approvai 

Waiting for 

MEC Letter of 
approvai 

Municipai 

Manager 

2. 

Resignation notice 
period iess than 30 
days 

During the audit of the 
empioyee terminations, it 
was noted that some 
empioyees did not serve 
the fuii 30 day notice 
period prior to 
resignation 

The Municipai 
Management to make 
sure that aii 
resignations are given 

30 days' notice 

On going 

Where 
resignation 
made without 

30 ieave days 
are deducted at 
pay out to cover 
the days where 
notice was not 

served 

Resignation ietters 
and copy of 
attendance 
register to 
substantiate 30 
days after 
resignation 


Director 

Corporate 

service 
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3. 

Expenditure: Evidence 
not submitted for 
audit purposes 

There's is a list of items 

where no sufficient 
evidence was provided to 
the auditors as per the 
information request 
documents. 

Establish records 
management system 
and make sure that all 
records are accessibly 
when they are needed 

30 J une 
2016 


Availability of 
documents for all 
sampled 
expenditure 


Chief Finance 

Officer 

4. 

Rateabie Vaiuation 
Reconciiiation not 
performed 

The rate able valuation 

reconciliation between 
the property register and 
the rates levied during 
the financial period was 
not performed by the 
Municipality.O 

• To perform the 
reconciliation on 
irregular bases 

• The reconciliations 

must be monitored and 
reviewed by senior 
management to ensure 
differences are 
investigated and 
resolved in a timely 

manner 

Monthly 

bases 


Monthly 

reconciliation 


Chief Finance 

Officer 
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5. 

1 nternal control 
deficiency 

The accounting officer 
did not impiement 
controis over the daiiy 
and monthiy processing 
and recondiing 
of revenue transactions. 

Estabiish records 
management system 
and make sure that aii 
records are accessibiy 
when they are needed 

30 J une 
2016 


Avaiiabiiity of 
documents for aii 
sampied 
expenditure 


Chief Finance 

Officer 

6. 

1 nformation not 
displayed on website 

During the audit, it was 
noted that the 
Municipaiity's website 
had not been updated 
with the information as 
outiined in the iegisiation. 

To ensure that aii 
necessary documents 
are upioaded on 
website within 
prescribed period 

On going 

Aii necessary 
information wiii 
be dispiayed 

Proof of aii 
compiiance 
documents 
dispiayed on 
website 


Municipai 

Manager 

7. 

Deficient credit 
control and debt 
collection policy 

During the audit, it was 
noted that the 
Municipaiity's credit 
controi and debt 
coiiection poiicy did not 
make any provision for 
matters reiating to 
unauthorised 
consumption of services, 
theft and damages. 

To revise debt 

coiiection and credit 
controi poiicy to inciude 
unauthorised 
consumption of service, 
theft and damages 

30 J une 

2016 

No progress 

• Copy of poiicy 

• and Counci i 

resoiution 


Chief Finance 

Officer 
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8. 

Asset Additions - 
1 nformation not 
provided for audit 
purposes 

Audit finding 

There's a list of asset 

additions where no 

sufficient evidence had 
been provided to the 
auditors as per the 
information request 
documents. 

Establish records 
management system 
and make sure that all 
records are accessibly 
when they are needed 

30 J une 

2016 

File is readily 
available with 
the supply chain 
unit 

Asset additions 


Chief Finance 

Officer 

10. 

1 nternai controi 
deficiency 

The Municipality did not 
implement proper record 
keeping in a timely 
manner to ensure that 
complete, relevant and 
accurate information is 

accessible and available 
to support financial and 
performance reporting 

• Establish records 
management system 
and make sure that 

all records are 
accessibly when they 
are needed 

• Develop GRAP 
Compliant checklist 

30 J une 

2016 

To appoint a 
new service 

provider to 

update the 

checklist 

GRAP Compliance 
check list 


Chief Finance 

Officer 
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11. 

Bidders not evaluated 
on functionality as per 
the invitation 

During the audit it was 
noted that the invitation 
to tender for diaries, 
calendars and name tags 
dated on 

27/11/2014, stipulated 
that the potential bidders 
will be evaluated on 
functionality based on 
capacity and experience. 
However no evidence 
was provided to 
indicate that functionality 
was evaluated. 

• The SCM unit must 

ensure that the 

evaluation criteria are 
adequately fulfilled 
before making the 
final award. Any 
evaluation where 
potential bidders fail 
to meet the minimum 
qualifying score for 
functionality must be 
disregarded. 

• The supply chain 
policy to be reviewed 
and all adverts issued 
for tenders to specify 
that the company 
profile is one of the 
requirements. 

30 March 

2016 

Draft Policy is 
available 

• Reviewed 

supply chain 

policy 

• Copy of adverts 

• Minutes of bid 

committees 


Chief Finance 

Officer 

12. 

Creditors sub ledger 
and supplier 
reconciliations not 
performed 

During the audit of 
payables, it was noted 
that the following 
reconciliations are not 
performed by the 
Municipality: 

Reconciliation between 
the creditors sub ledger 

• To perform the 
reconciliation on 
irregular bases 

• The reconciliations 

must be monitored and 
reviewed by senior 
management to ensure 
differences are 
investigated and 
resolved in a timely 

manner 

30 March 

2016 

1 nformation 
currently being 
loaded on the 
system, 
reconciliation 
can only be 
completed after 
information has 

been loaded 

Reconciled general 
ledger and 

creditors sub 

ledger 


Chief Finance 

Officer 
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and the general ledger 

Reconciliation between 
supplier statements and 
creditors control accounts 







13. 

Statement of Changes 
in Net Assets 

The "correction of errors 

in creditors" line item in 
the prior period (R 423 
417) is not supported by 
any note disclosure or 
explanation. 

Furthermore, no 
supporting evidence has 
been provided to the 
auditors to substantiate 

the rationale of this 
adj ustment. 

To develop detailed 
GRAP compliance 

checklist prior to the 
preparation of annual 
financial statement 

30 March 

2016 


Updated checklist 


Chief Finance 

Officer 

16. 

IT GOVERNANCE 

An IT Governance 

Framework was 

documented however it 
was not yet approved 
and implemented. 
Additionally the following 
deficiencies were noted 

in the IT Governance 

Framework: 

The following main 
objectives were not 

To develop IT 

Governance framework 
that will support IT 
Strategy, serve as a 
guide for IT reporting, 
IT decision, IT 

structure, IT 

governance process, 
polices , standards and 
procedures 

30 J une 

2016 

The process of 
soliciting the 

service provider 
has started 

Copy of IT 

Governance 

framework 

1 T governance 

specification has 
been submitted to 

SCM for 

specification 

committee 

Data 

capturer/IT 
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defined in the 
frannework: 

Strategic aiignment 
Vaiue deiivery 
Resource management 
Risk Management 

Performance 
management 
Thefoiiowing IT Process 
and controi modeis were 
not defined in detaii: 
Politicai and strategic 
ieadership 

Unambiguous 
accountabiiity 
Roies and responsibiiities 
(GITO shouid preferabiy 
represent the I CT 
function on executive 
management ievei) 

ICT resources 
Capacity and capabiiity to 
enabie ICT service 
deiivery 

Organisationai structures 
Practices to avoid 
breakdown in internai 
controi and oversight (IT- 
reiated poiicies, 
procedures and 
standards) 
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Stakeholders (internal 
and external) 







c 

IT Steering 

Committee not 
established 

There were no 

governance structures 

overseeing IT or an IT 

Steering Committee in 

place at the municipality. 

To establish IT Steering 
committee and its 

terms of reference 

31 

December 

2015 

IT Steering 
committee 

has been 

established 

List of committee 
members, Minutes 
and attendance 
register of their 
meeting 

Did not convene 

Municipal 

Manager 

19. 

No IT Risk register in 
place 

Although an enterprise 

wide risk register was in 

place it was noted that IT 

related risks were not 

included in this register. 

Develop IT Risk register 

BlDecembe 

r 2015 

Risk register 
has been 
developed 

Updated risk 

register 

Done, but not yet 
approved by 

council 

Municipal 

Manager 

20. 

IT service provider 
performance not 
formally reviewed and 
reported on Previous 

• The Management to 
consistently monitor 
vendor performance 
through regular 

30 March 

2016 

Scheduled 
meeting to 
be 

communicat 

Attendance register 
and reporting 

method 

None 

Data 

capturer/IT 
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audit finding 

There were no formal 
processes in place to 
review and report on the 
performance of services 
rendered by vendors. 

Foiiow up audit 
finding 

The following was noted 
with regard to the 
management of I T 
service providers: 

There were no formal 
processes in place to 
review and report on the 
performance of services 
rendered by vendors. 

Performance 
measurements and 
frequency of reporting 
and monitoring were not 
defined on the Bytes and 
Payday service level 
agreements. 

The Payday service level 
agreement obtained was 
outdated and had expired 
in J une 2012. 

If regular monitoring of 


review of 

performance reports. 
• Review service level 
agreement 


ed with all 
IT related 
service 
providers 
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service levels received is 
not performed, 
management may not be 
aware of deviations from 
agreed service levels. 

This could result in 
excessive delays in the 
resolution of support 
incidents, downtime and 
a loss of productivity. 

Furtherrrore, the 
Municipality will not be in 
a position to determine if 
it is receiving value for its 
spend if service levels 
received is not 
monitored. 







21. 

No Patch Management 
Policy in place 

Previous audit finding 

A Patch Management 
Policy had not been 
formally documented and 
approved by the 
Municipality. 

Follow up audit 
finding 

A Patch Management 

Developed patch 
management policy and 
to be approved by 
council 

30 J une 

2016 

The process of 
soliciting the 

service provider 
has started 

Copy of Patch 
management policy 
and council 

resolution 

1 T governance 

specification has 
been submitted to 

SCM for 

specification 

committee 

Data 

capturer/IT 
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Policy has not been 
documented, approved 
and implemented at the 
municipality. 







23. 

Password policy 

inadequately documented 
and inadequate password 
settings configured on 
systems utilised (Venus, 
Payday and Conlog) 

Previous audit finding 

The following deficiencies 
were noted regarding the 
password settings 
documented in the 
internet and security 
policy: 

The password 
configuration settings did 
not detail the standards 
to be applied for 
minimum password days, 
password complexity and 
password history 

The IT Security Policy 
stipulated a password 
length of 6 characters; 
however a password 
length of 8 characters 
had been configured on 
the Windows Active 

To review internet and 
security policy to 
include the standards 
to be complied with for 
minimum password 
days, password 
complexity and 
password history 

30 J une 

2016 

The process 
of soliciting 

the service 

provider has 
started 

Copy of the 

reviewed internet 
and security policy 

1 T governance 

specification has 
been submitted to 

SCM for 

specification 

committee 

Data 

capturer/IT 
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Directory 

The password settings 
for Coniog and 

Pastei/Sage Evoiution 
couid not be obtained to 
perform a comparison to 
those stipuiated in the 

I nternet and Security 
Poiicy. 

Foiiow up audit finding 
Thefoiiowing deficiencies 
reiated to password 
settings were noted: 

The I nternet and Security 
Policy did not stipulate 
required password 
settings to be configured 
on systems for minimum 
password days, password 
complexity and password 
history 

There were no password 
settings configured on 
the Venus and Payday 
applications 

The password settings 
for Coniog could not be 
obtained to perform a 
comparison to those 
stipulated in the I nternet 
and Security Policy. 








24 . 

No user awareness 
training on IT security 

No security awareness 

• The security 
awareness element to 
be part of the induction 

30 

2016 

J une 

The policy will 
be done by the 
Appointed IT 

Attendance 
registers for the 
security awareness 

Ongoing 

Data 

capturer/IT 

service 
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training, program or 
process had been 
estabiished to promote 

IT security. 

program for newiy 
appointed empioyees. 

• To conduct reguiar 
workshops on security 
awareness programs 
for aii empioyees 


governance 
service provider 

induction program 



25. 

System usernames 

not compiiant to the 
approved user naming 
convention of the 
municipaiity (Venus and 
Payday) 

1 1 was noted that the 
standard naming 
convention to be appiied 
to usernames was 
supposed to be first 
initiai and surname. 
Windows Active Directory 

usernames were 

compiiant to this 
standard however Payday 
and Venus usernames 
were not compiiant as 
they were first names 
oniy. 

• To appiy the naming 
convention on aii 
appiications utiiised. 

• On reguiar basis 
review shouid be 

conducted to ensure 

usernames conform 
to the approved 
standard naming 
convention 

30 J une 

2016 

The user access 
poiicy wiii be 
updated by the 

1 T governance 
appointed 
service provider 
for user naming 
to compiy with 
the poiicy 

List of the 

compiying user 

naming 
conventions 
(Screenshots) 

On going 

Data 

capturer/IT 

service 

26. 

Formal reviews and 
monitoring of logon 
violations not 
performed (Windows 
Active Directory, 

Venus, Pastel and 

Security and iogon 
vioiation reports 

30 J une 

2016 

No progress, no 
senior 

administrator 
appointed for aii 
mentioned 
appiications 

Dependant on the 
appointment of the 
senior 

sdministrator 

None 

Data 

capturer/IT 

service 
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Payday) 

No evidence that IT 
security vioiations or 
faiied access attempts 
are monitored or 
reviewed on a reguiar 
basis was provided. 







27. 

User Access and 
Administration 
Procedure not 
approved 

Previous audit finding 

The Municipaiity had not 
deveioped and approved 
a User Account 
Management Poiicy. 

Foiiow up audit 
finding 

A User Access and 
Administration Procedure 
had been deveioped but 
the procedure had not 
yet been approved. 
Empioyees may not be 
aware of the processes 
to be foiiowed and the 
approvais required for 
new user access, 

modification of access, 
termination of access and 
password resets on 



The user access 
poiicy to be 
updated by the 

I T governance 
service provider 
and submitted 

to counci i for 
approvai 


Dependant on the 
appointment of 
the IT 

governance 
service provider 

Data 

capturer/IT 

service 
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Municipal systems. This 
may result in 
unauthorised users 
gaining access to the 
systems in use. 







28 . 

No documentation 
completed for 
administrator access 
rights granted 
(Windows Active 
Directory) 

Previous audit finding 

Administrator rights to 
the domain were granted 
to S Buthelezi (IT 
Technician) and Sfiso 
Maphumulo (Bytes 

Desktop Engineer) 
without formal 

documentation and 
approval taking place. 

Follow up audit 
finding 

Thabani P Masondo (IT 
Technician - Bytes) had 
been granted 
administrative rights on 
the Windows Active 
Directory Domain without 
proper documentation 
being completed and 


31 March 

2016 

Administrators 
access request 
form to be 
developed and 
completed by 
relevant 

administrators 

Copy of the 

administrator 
access request 

form 

None 

Data 

capturer/IT 

service 
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approved. We also noted 
that the "reception" user 
account had 
administrator 







29. 

Register for the 
allocation of Microsoft 
licenses not 
completed 

Previous audit finding 

There is no volume based 
licencing agreement with 
Microsoft for the 

Windows operating 
system. Currently, 
licences are purchased 
on an ad hoc basis 

whenever a new terminal 
is acquired. Licences 
purchased were 
previously allocated to a 
terminal by completing a 
register; however this 
register is no longer 
maintained. 

Follow up audit 
finding 

A software licence 
register is not maintained 
and 

Microsoft volume based 
licences had not yet been 
procured. 


30 J une 

2016 

Microsoft 

Volume licence 
will procured 

Specification 
was submitted 

to SCM 

Advert, 

procurement 

documents 

Procurement 
process is with 
SCM 

Data 

capturer/IT 

service 
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This could result in 
inadequately licensed 
terminals being utilised 
by the municipality and 
licenses not required 
being purchased. The 
municipality may be 
liable for licencing fines 
and be at risk of 
reputational damage if 
software in use is not 
appropriately licensed. 







30. 

User access rights not 
periodically reviewed 
(Payday, Pastel, 

Venus and Conlog) 

Previous audit finding 

The following 
weaknesses were noted 
with regard to the review 
of user access rights 
assigned on systems: 
Periodic reviews were not 
performed on the Conlog 
system to ensure that 
current user access rights 
and privileges assigned 
on the system were still 
commensurate with an 
employee's job 
responsibilities 

Evidence related to the 


30 MARCH 

2016 

No progress as 
yet, Finding to 
be 

communicated 
with third 

parties 
application 
service 
providers 
excluding 
venus as per 

the scheduled 
meeting 

Minutes and 

attendance register 

None 

Data 

capturer/IT 

service 
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user access reviews 
performed for the Venus, 
Payday and systems was 
not maintained 

Follow up audit 
finding 

No user access reviews 
were performed for the 
period under review. 








31. 

User access forms not 
completed (Pastel and 
Payday) 

1 1 was noted that users 

were added on the Pastel 
and Payday systems 
using e-mails or 
telephone confirmation 
and as a result the some 

users were added on the 
respective systems 
without user 

authorisation forms being 
completed 


29 

FEBRUARY 

2016 

User 

forms 

review 

access 

under 

Copy of an adopted 
user access form 

On going 

Data 

capturer/IT 

service 
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32. 

Terminated 
employees user 
accounts not disabled 
(Venus, Pastel and 
Payday) 

1 1 was noted that some 

user's employment was 

terminated whilst their 

user accounts were still 

active on the respective 

systems 


29 

FEBRUARY 

2016 

Awaiting 

terminated 

users from HR 

List of terminated 

users 

Ongoing 

Data 

capturer/IT 

service 

33. 

System administrator 
activities not 
reviewed (Windows 
Active Directory, 

Venus, Pastel and 
Payday) 

Previous audit finding 

I ndependent reviews of 

System Administrator 

activities on the Windows 

Active Directory, Venus 

and Payday systems 

were not performed. 

Follow up audit 
finding 


31 MAY 

2016 

No progress, 

sytems 

administrator to 

be reviewed at 

a senior level 

This will depend on 
an appointment of 
a senior system 
administrator 

None due to 
insufficient staff 

Data 

capturer/IT 

service 
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No system administrator 
reviews were performed 
for the period under 
review. 







34. 

Service provider 
responsibie for 
administration of 
Human Resource and 
Payroii system 
(Payday) 

Previous audit finding 

Cognisance was taken of 
the fact that that an 
empioyee at the 
municipaiity had been 
assigned administrator 
access on the Payday 
system. 1 1 was however 
noted that reiiance was 
being piaced on the 
service provider to 
administer the system as 
the empioyee had not 
been trained on the 
administrator 
functionaiity avaiiabie on 
the Payday system. 

Foiiow up audit 
finding 

The Payday service 
provider was soieiy 
responsibie for the 


31 August 
2015 

Some of the 

staff members 
were nominated 

and trained as 

administrators 
for payroii and 
HR 

Nomination ietters 

Resoived 

Data 

capturer/IT 

service 
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administration of the 
system even though 
there was an individual 

in-house with 

administration access 
rights assigned. 







35. 

Business Continuity 
Pian not estabiished 
and Disaster Recovery 
Pian not tested 

Previous audit finding 

The following 
weaknesses were 
identified with regard to 

IT service continuity 
controls: 

A Business Continuity 

Plan (BCP) had not been 
established 

A Disaster Recovery Plan 
(DRP) had been 
established however the 
plan had not been tested. 

Foiiow up audit 
finding 

The BCP was not formally 
documented and the DRP 

had not been tested. 
Additionally the following 
was noted not being 
defined in the DRP: 

Disaster notification and 


30 J UNE 

2016 

BCP to be 

developed DRP 
site to be 

developed and 
tested as per 
the DRP 

guidelines 

BCP and DRP 

documents and 

testing evidence 

On going 

Data 

capturer/IT 

service 
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plan activation; 

Systenn and business unit 
recovery procedure; 
Primary site procedure; 
Re-establishment of 
normal operations; 

Post recovery review; 

Plan maintenance and 
testing; 

Training and awareness 
of users and information 
services function staff; 

A contingency processing 
alternative exists for each 
major data centre and is 
capable of replacing the 
primary site at short 
notice; 

DRP did not make 
reference to any security 
requirements which 
should be maintained in 

an occurrence of a 
disaster; 

The need to meet 
statutory and regulatory 
requirements during a 
disaster has not been 

considered and 
addressed; and 

No hard copy was kept 
offsite 







36. 

Deficiencies noted 
with regard to backup 


30 J UNE 

2016 

Back up policy 
to be updated 

Policy and council 
resolution 

On going 

Data 

capturer/IT 
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processes currently 
performed 

Previous Audit finding 

The following deficiencies 
were noted with regard 
to backups performed: 

The Backup Policy did not 
detail the process for 
tape movement (secure 
transportation from 
onsite to offsite) 

The backup register did 
not identify the status of 
backups performed 

An offsite backup register 
was not maintained. 
Follow up audit 
finding 

The following deficiencies 
were noted with the 
backup process currently 
performed by the 
municipality 



by the 

appointed IT 

governance 
service provider 



service 

37. 

Emergency change 
procedures not 
documented 

Cognisance was taken of 
the fact that a Change 
Management Policy had 
been developed by the 
municipality. It was 


30 J UNE 

2016 

Policy to be 
updated and 

actioned 

Policy with updated 
changes 

On going 

Data 

capturer/IT 

service 
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however noted that 
procedures to be 
followed for emergency 
changes were not 
detailed in the policy. 







38. 

System change logs 
not available (Venus, 
Payday, and Conlog) 

Previous audit finding 

The municipality was 
unable to extract system 
generated logs to 
substantiate if any 
changes had been 
implemented on key 
financial systems for the 
period under review. 

Follow up audit 
finding 

Change logs could not be 
generated from the 

Venus, Payday and 

Conlog systems. 
Additionally, there were 
updates performed on 
Payday (4.7a) and Venus 
(20.1) for the period 
under review however no 
change control process 
was followed for these 
updates. 


31 MAY 

2016 

Finding to be 
communicated 

to the relevant 

administrators 

of the 

application or 
service 

providers on a 

scheduled 

meeting 

Minutes and 

attendance register 

On going 
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39. 

No server room 
maintenance schedule 
in place 

Previous audit finding 

A maintenance schedule 

for devices inside the 

server room had not 
been developed. 
Maintenance was carried 

out on an ad hoc basis 
and there was no formal 
process to ensure that all 
IT environmental controls 

within the server room 
were periodically 
serviced. 

Follow up audit 
finding 

A maintenance schedule 

for devices inside the 

server room had not 
been developed. As a 
result it was noted that 
the UPS and generator 
had not been serviced for 
the period under review. 


31 AUGUST 

2015 

The 

maintenance 

schedule was 
presented to 

1 nternal Auditor. 

Copy of the 

maintenance 

schedule 

Resolved 

Data 

capturer/IT 

service 

40. 

No Firewall Policy in 
place 

A Firewall Policy had not 
been documented. 


30 J UNE 

2016 

Policy to be 
developed by 

the appointed 

1 T governance 
service provider 

Policy and council 
resolution 

Ongoing 

Data 

capturer/IT 

service 
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41. 

1 nadequate 
commenting on 
firewall rules 

1 1 was noted that Cisco 

firewall rules Access 
Control Lists (ACLs) were 
not adequately 
commented on to include 

the full name of the rule 
and a brief description 
associated with each 

rule. 

1 n the current state, 
when reviewing ACL's 
existing on the firewall it 
is difficult to determine 

the reason behind the 
implementation of the 
firewall rules as well as 
the expiry date 
associated with each 
rule. 


30 J UNE 

2016 

Policy to be 
developed by 

the appointed 

1 T governance 
service provider 

Policy and 

screenshots 

Ongoing 

Data 

capturer/IT 

service 

42. 

Outdated firewall 
software version 

1 1 was noted that the 
firewall was running an 
outdated Cisco software 
version of ASA 8.2(5), 
ASDM 6.4(5). 


30 J UNE 

2016 

Policy to be 
developed by 

the appointed 

1 T governance 
service provider 

Policy and 

screenshots 

Ongoing 

Data 

capturer/IT 

service 

43. 

No review of firewall 
logs and 
configurations 


30 J UNE 

2016 

To be 

developed and 
reviewed by the 

Policy and 

screenshots 

On going 

Data 

capturer/IT 

service 
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Firewall configuration 
settings had not been 
formally reviewed. 

Security and or access 
violations may not be 
detected in a timely 
manner resulting in data 
integrity, availability and 
confidentiality being 
compromised. 



appointed IT 

governance 
service provider 




44. 

1 nsecure network 
services 

We noted that remote 

administration of the 
firewall using Secure 

Shell (SSH) was not 
restricted to individual 
remote management 1 P 
addresses and trusted 

hosts. 


30 J une 

2016 

Secured 

connection to 
be restricted by 
the firewall 

policy once 

developed 

Policy and 

screenshots 

ongoing 

Data 

capturer/IT 

service 

45. 

Deficiencies noted on 
the eiectronic funds 
transfer processes 
perform^ 

There was a no 

documented electronic 
funds transfer (EFT) 
payment policy that 
served as a guideline for 
all creditors and 
employee salaries EFT 
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payments. 








THE FOLLOWI NG WAS 
EXTRACTED FROM 

THE PREVIOUS 

ACTION PLAN 








USER ACCESS 

CONTROL 

22.1 No User Account 
Management Policy in 
place 

The Municipality has not 
developed and approved 
a User Account 

Management Policy. 

■ User Account 

Management Policy to 
be developed, 

approved and 

implemented. 

■ All employees should 

be made aware of the 
policy and be 

required to adhere to 
its contents. 

31 March 

2015 

■ Done and 

submitted to 

Council 
Meeting of 
26 February 
2015. 

■ Workshop 
scheduled to 
be done by 
the 31^ of 
March 2015. 

■ 1 mplementat 
ion of the 
policy 

planned for 
31 July 

2015. 

Council resolution 
dated 8 May 2015. 

■ Change Control 
Policy 

containing the 
User Access 

Management 
aspects 

approved by 

Council on the 
May 2015 - 
lA examined 

Council 

Resolution. 

■ Workshop 

planned for 

early J uly 2015. 

Director 

Corporate 

Services 


No documentation 

completed for 

administrator access 
rights granted 

(Windows Active 

Directory) 

No documentation 

confirming formal 

Administrator rights to 

■ Procedures for 

granting and approval 
of Administrator 

access rights should 
be included in the 

User Account 

Management Policy. 

■ Granting of System 
Administrator access 

31 

December 

2015 

■ The 

background to 
this scenario 

is that at 

inception 

these 

processes 

were informal 

and less 

structured. 

None. 

■ No progress as 
yet, 

implementation 
date is 15 J uly 
2015. 

Director 

Corporate 

Services. 
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the I.T. Technician and 

the Service Provider. 

rights to be 

formaiised and 

approved by Director 
Corporate Services. 


Going forward 
these wiii be 

formaiised 
through the 
impiementatio 
n of the User 

Access 
Management 
Poiicy. Date 
of 

impiementatio 
n 15 J uiy 
2015. 





Register for the 
allocation of Microsoft 
licenses not 

completed 

No voiume based 

iicencing agreement with 
Microsoft for the 

Windows operating 

system. Licences 

purchased on an ad hoc 
basis. 

■ A voiume based 
iicensing agreement 
to be entered into 
with Microsoft. 

■ If this option is not 

financiaiiy viabie, 

then a iist of iicences 
together with the 
seriai numbers of 

devices the iicences 

are iinked to shouid 
be maintained by the 
Municipaiity. 

30 J une 

2015 

■ A voiume 

based ii cense 
wiii be 

procured in 

the new 

financiai year. 
It was 

previously 
planned for 
this year 

however due 
to budget 

constraints 

had to be 

reprioritised 

and 

postponed. 

■ None. 

lA - A sample of 
17 licences 

inspected and 

noted as follows: 

■ Six were 

duplicate. 

■ A licence on the 
computer not 
reflected on the 
register. 

■ Register not 

updated in lieu 
of a stolen 
computer. 

■ One of the 
computers 
could not be 

accessed 
personnel 
working off site. 

■ In respect of 

Director 

Corporate 

Services. 
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three computers 
with 2013 

software, 
technician could 
not prove the 
validity of such 
licences through 
corresponding 
licence screen 
display on 

respective 
computers. 

■ Two computers 
not on the 

network and 

therefore 

technician 

unable to 

access and 

prove the 

licence for audit 

purposes. 

■ The sum-total is 
that only three 
licences were 
matched with 
no duplicates. 

The procurement 
of the volume 

based license 

remains critical. 



User access rights not 
periodically reviewed 

■ Periodic checks to 
confirm that current 

Revised 
target date 

■ Not 

implemented 

None. 

■ Review of user 
access rights 

Chief 

Financial 
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(Venus, Payday, Cash 
focus and Conlog) 

User access rights not 
reviewed for application 
systems. 

access rights remain 
commensurate with 
their job 

responsibilities. 

■ Maintain and retain 

the evidence of such 

checks. 

■ Conduct checks 

quarterly. 

30 April 

2015. 

pending the 
nomination of 
System 
Administrators 
by User 

Departments. 


only 

implementable 

after 

nomination of 
active System 
Administrators. 

The function 

remains 

outsourced. 

Officer. 


Program change 

management 

Emergency change 

procedures not 

documented in the 

Change Management 

Policy. 

Emergency change 

management 
procedures should be 
comprehensively 
documented and 

incorporated in the 
Change Management 
Policy; approved by 
Council and 

communicated to 

affected users. 

31 March 

2015 

■ Emergency 

change 
management 
procedures 
not done as 
yet. This is 

due to such 
changes being 
administered 
by an off-site 
Service 

Provider. 

■ An addendum 
to the policy 
will be done 
by the end of 

J uly 2015. 

■ None. 

■ No progress to- 
date, date of 
implementation 
is 31 July 2015. 

Director 

Corporate 

Services 


System change logs 
not available (Venus, 
Payday, Cashfocus 

and Conlog) 

System generated logs 
to substantiate changes 

■ Staff should be 

trained on how to 
extract change logs 
from systems. 

■ System generated 

change logs should 

28February 

2015 

■ Staff have 

been trained 
on extracting 
change logs 
from the 

Venus system 

J ob card. 

■ No proof of 
system 
generated 
change logs and 
review for 

J anuary to 

Director 

Corporate 

Services. 
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made (if any changes) 
not extractable. 

be reviewed 

periodically to confirm 
no unauthorised 

changes were made 
to applications. 

■ Evidence of these 
reviews performed 

should be maintained. 


and these logs 
are now being 
generated and 
reviewed 
accordingly. 

■ Payday, 
Cashfocus and 
Conlog remain 
outstanding; 
assistance 
awaited from 

the service 

providers. 

■ lA - POE on 
training of 

staff on Venus 
examined. 


March 2015 for 

Venus and 

Payday as 

default printer 
was not linked 

to the network 
for this period. 

■ Cashfocus and 

Conlog are 

online systems 
whereby servers 
are offsite, thus 
Municipality not 
in a position to 
generate these 
logs in-house. 

■ The absence of 
System 
Administrators 
complicates this 
process further. 



FACILITIES AND 

ENVI RONMENTAL 
CONTROLS 

Server room visitor's 
register while maintained 
is not being reviewed by 
Management. 

■ Management should 
review the server 
room visitor's register 
on a periodic basis to 
ensure it is being 
consistently 
completed and signed 
off. 

30 

November 

2014 

■ Reviews of 

access 

register are 

being done by 
management 
examined 
by lA. 

■ Server Room 

Access Register. 

■ lA - Server 

Room Access 
Register Feb - 
Apr 2015 signed 
off by the 1 .T. 
Technician; 
reviewed by 

Director 
Corporate 

Director 

Corporate 

Services 
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Services. 



No server room 
maintenance schedule 
in place 

No maintenance 
schedule in place for the 
devices in the server 

room. 

■ Management to 
develop a 
maintenance 
schedule; 

■ Server room 

environmental 

controls to be 
regularly serviced for 
continuous 
functioning of 
systems and business 
operations. 

31 

December 

2014 

Done. 

■ None. 

■ Maintenance 

will be done in 
the quarter. 

Director 

Corporate 

Services 


INFORMATION 

TECHNOLOGY 

SERVI CE CONTI NUI TY 

Disaster Recovery Plan 
(DRP) and Business 
Continuity Plan (BCP) 
neither established nor 

tested. 

■ A BCP should be 
developed, 
implemented and 
communicated to all 
employees. 

■ The DRP and BCP to 

be tested on an 

annual basis 

■ Results of the testing 
to be evaluated, 
benchmarked against 
required criteria in 

30 J une 

2015 

Disaster 

Recovery Plan 
in progress. 
Business 
Continuity Plan 
not done. 

Draft Disaster 

Recovery Plan. 

■ Draft Disaster 
Recovery Plan 
to be submitted 
for approval to 
the Corporate 
Portfolio as well 

as Council in 

J une 2015. 

■ Business 

Continuity Plan 
not actioned. 

To be 

Director 

Corporate 

Services 
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order assess the 

effectiveness of the 
plans. 

■ Changes in the DRP 
and BCP and should 

be based on the 
results of testing 
performed with the 
amended plans. 




developed in 

the second half 
of 2015/16. 



Evidence of backup 
restoration testing 
performed not 
maintained. 

■ There is no evidence of 
the restoration testing 
of backup media for the 
period under review. 

■ Continued readability 

(usefulness) of backup 
media may be 

questionable. 

■ Restoration testing of 
backup media should 
be conducted on a 

scheduled basis and 

evidence of the 

testing performed 

should be maintained. 

28 February 
2015 

■ Backup 
restoration 

tests done. 

J ob Card. 

lA - No proof of 
backup 

restoration tests 
provided. 

Director 

Corporate 

Services 


1 nadequate backup 
processes in piace 

■ Backup Policy not 

detailing the process 
for tape movement i.e. 
secure transportation 
from onsite to offsite. 

■ Backup register not 

■ Management should 
ensure that backup 
standards and 

procedures are 

enhanced to include 
the process for 

transportation of 

backup media. 

31 March 

2015 

Done. 

Done. 

Council resolution. 

■ Backup 

Procedure 

Policy approved 
by Council on 
26 February 

2015 - lA 

Council 

resolution 

examined. 

Director 

Corporate 

Services 
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identifying the status of 





backups performed. 

■ Backup registers / 




tempi ate 

to be 



■ No offsite backup 

amended to inciude 



register. 

the status of backups 




performed. 





■ An offsite 

backup 




register 

to be 




maintained 

to record 




aii tapes stored at the 




offsite 

iocation. 

storage 



Done 


I A comments: 

■ Backup register 
does identify 
the status of 
backups 
performed. 


■ The 

Municipaiity 
has an offsite 
backup 

register. 
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